CVE-2019-6318
CRITICAL · CVSS 9.8EPSS 2.6%EU EUVD
HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.
Key facts
- CVSS score
- 9.8 (v3.0)
- Severity
- CRITICAL
- CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- Weakness (CWE)
- CWE-347
- EPSS score
- 2.6% (85th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2019-15883)
- Published
- April 11, 2019
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2019-15883 in the EU Vulnerability Database. Last updated in EUVD on August 4, 2024.
View on the EU Vulnerability DatabaseAffected products
- hp / color laserjet cm4540 mfp
- hp / color laserjet cm4540 mfp firmware
- hp / color laserjet enterprise cp5525
- hp / color laserjet enterprise cp5525 firmware
- hp / color laserjet enterprise flow mfp m577
- hp / color laserjet enterprise flow mfp m577 firmware
- hp / color laserjet enterprise flow mfp m680
- hp / color laserjet enterprise flow mfp m680 firmware
- hp / color laserjet enterprise flow mfp m681
- hp / color laserjet enterprise flow mfp m681 firmware
- hp / color laserjet enterprise flow mfp m682
- hp / color laserjet enterprise flow mfp m682 firmware
- hp / color laserjet enterprise flow mfp m880z
- hp / color laserjet enterprise flow mfp m880z firmware
- hp / color laserjet enterprise m552
- hp / color laserjet enterprise m552 firmware
- hp / color laserjet enterprise m553
- hp / color laserjet enterprise m553 firmware
- hp / color laserjet enterprise m651
- hp / color laserjet enterprise m651 firmware
- hp / color laserjet enterprise m652
- hp / color laserjet enterprise m652 firmware
- hp / color laserjet enterprise m653
- hp / color laserjet enterprise m653 firmware
- hp / color laserjet enterprise m750
- hp / color laserjet enterprise m750 firmware
- hp / color laserjet enterprise m855
- hp / color laserjet enterprise m855 firmware
- hp / color laserjet enterprise mfp m577
- hp / color laserjet enterprise mfp m577 firmware
- hp / color laserjet enterprise mfp m680
- hp / color laserjet enterprise mfp m680 firmware
- hp / color laserjet enterprise mfp m681
- hp / color laserjet enterprise mfp m681 firmware
- hp / color laserjet enterprise mfp m682
- hp / color laserjet enterprise mfp m682 firmware
- hp / color laserjet managed e55040dw
- hp / color laserjet managed e55040dw firmware
- hp / color laserjet managed e65050
- hp / color laserjet managed e65050 firmware
- hp / color laserjet managed e65060
- hp / color laserjet managed e65060 firmware
- hp / color laserjet managed flow mfp e57540
- hp / color laserjet managed flow mfp e57540 firmware
- hp / color laserjet managed flow mfp e6750
- hp / color laserjet managed flow mfp e6750 firmware
- hp / color laserjet managed flow mfp e67560
- hp / color laserjet managed flow mfp e67560 firmware
- hp / color laserjet managed flow mfp e77822
- hp / color laserjet managed flow mfp e77822 firmware
and 236 more…
Certified products that may be affected
13 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- HP Color LaserJet Enterprise MFP M776, HP Color LaserJet Enterprise Flow MFP M776, HP LaserJet Enterprise MFP M632/M633/M634/M635/M636, HP LaserJet Enterprise Flow MFP M634/M635/M636, HP LaserJet Managed MFP E62655/E62665 and HP LaserJet Managed Flow MFP E62665/E62675 multifunction printers (MFPs) with HP FutureSmart 5.7.1.1 Firmware - HP Inc. - Common Criteria OCSI/CERT/ATS/03/2024/RC - active
- HP Digital Sender Flow 8500 fn2 Document Capture Workstation and HP ScanJet Enterprise Flow N9120 fn2 Document Scanner with HP FutureSmart 4.12 Firmware - HP Inc. - Common Criteria OCSI/CERT/ATS/02/2023/RC - active
- HP Color LaserJet Enterprise M856, HP Color LaserJet Managed E85055, and HP LaserJet Enterprise M607/M608/M609/M610/M611/M612 printers with HP FutureSmart 4.11.2.2 Firmware - HP Inc. - Common Criteria OCSI/CERT/ATS/05/2022/RC - active
- HP Color LaserJet Enterprise MFP M776, HP Color LaserJet Enterprise Flow MFP M776, HP LaserJet Enterprise MFP M632/M633/M634/M635/M636, HP LaserJet Enterprise Flow MFP M634/M635/M636, HP LaserJet Managed MFP E62655/E62665, and HP LaserJet Managed MFP Flow E62665/E62675 multifunction printers (MFPs) with HP FutureSmart 4.11.2.2 Firmware - HP Inc. - Common Criteria OCSI/CERT/ATS/04/2022/RC - active
- HP FutureSmart 4.11.0.1 Firmware for the HP Color LaserJet Enterprise M554, HP Color LaserJet Enterprise M555, and HP LaserJet Enterprise M806 printers - HP Inc. - Common Criteria CSEC2020022 - active
See all 13 in the Security Certifications Explorer.
References
- https://support.hp.com/us-en/document/c06265454(Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain