What is the CVSS score of CVE-2022-43780?

CVE-2022-43780 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.9%.

M2U75A Firmware CVE-2022-43780

HIGH

Uncontrolled Resource Consumption (CWE-400)

2022-12-12 hp-security-alert@hp.com

HP Denial Of Service M2U75A Firmware M2U76A Firmware M2U77A Firmware M2U81A Firmware M2U81B Firmware M2U82A Firmware M2U82B Firmware M2U84A Firmware M2U84B Firmware M2U85A Firmware M2U85B Firmware M2U86A Firmware M2U86B Firmware M2U86C Firmware M2U87A Firmware M2U87B Firmware M2U88B Firmware M2U89B Firmware M2U91A Firmware M2U91B Firmware M2U92A Firmware M2U92B Firmware M2U94A Firmware M2U94B Firmware Z4A54A Firmware Z4A59A Firmware Z4A60A Firmware Z4A61A Firmware Z4A61B Firmware Z4A69A Firmware Z4A70A Firmware Z4A71A Firmware Z4A73A Firmware Z4A74A Firmware Z4B12A Firmware Z4B13A Firmware Z4B14A Firmware Z4B18A Firmware Z4B27A Firmware Z4B28A Firmware Z4B29A Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Dec 12, 2022 - 13:15 nvd

HIGH 7.5

DescriptionNVD

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.

AnalysisAI

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack. Affected products include: Hp M2U75A Firmware, Hp M2U76A Firmware, Hp M2U77A Firmware, Hp M2U81A Firmware, Hp M2U81B Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.