Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution ...
Date: 2022-12
Affected: hp/color_laserjet_cm4540_mfp_cc419a_firmware, hp/color_laserjet_cm4540_mfp_cc419a, hp/color_laserjet_cm4540_mfp_cc420a_firmware, hp/color_laserjet_cm4540_mfp_cc420a
Attack vector: rce
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2021-3942
CWE: CWE-119
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.


Mitigations:

Architectural layers (MAESTRO):