Buffer overflow in HP Development Company products - CVE-2022-28722

Vulnerability identifier: #VU67639

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-28722

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. An attacker with physical access can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

HP OfficeJet 8022 All-in-One Printer
HP OfficeJet 6950 All-in-One Printer series
HP OfficeJet 6960 All-in-One Printer series
HP OfficeJet Pro 6960 All-in-One Printer series
HP OfficeJet Pro 6970 All-in-One Printer series
HP OfficeJet Pro 8210 Printer series
HP OfficeJet Pro 8740 All-in-One Printer series
HP OfficeJet Pro 8730 All-in-One Printer
HP OfficeJet Pro 7740 Wide Format All-in-One Printer series
HP OfficeJet Pro 7730 Wide Format All-in-One Printer
HP OfficeJet Pro 7720 Wide Format All-in-One Printer series
HP OfficeJet 8022e All-in-One Printer
HP PageWide Pro 772dw Multifunction Printer
HP PageWide Pro 772dn Multifunction Printer
HP PageWide Pro 750dw Printer
HP PageWide Pro 750dn Printer
HP PageWide Managed P77760z Multifunction Printer
HP PageWide Managed P77750z Multifunction Printer
HP PageWide Managed P77740z Multifunction Printer
HP PageWide Managed P77740dw Multifunction Printer
HP PageWide Managed P77740dn Multifunction Printer
HP PageWide Managed P75050dw
HP PageWide Managed P75050dn
HP PageWide Pro 452dn Printer series
HP PageWide Pro 452dw Printer series
HP PageWide Pro 477dn Multifunction Printer series
HP PageWide Pro 477dw Multifunction Printer series
HP PageWide Pro 552dw Printer series
HP PageWide Pro 577 Multifunction Printer series
HP PageWide Managed P57750dw Multifunction Printer
HP PageWide Managed P55250dw Printer series
HP PageWide 377dw Multifunction Printer
HP PageWide 352dw Printer

Install updates from vendor's website.

HP OfficeJet 8022 All-in-One Printer - update to 001.2213A
HP OfficeJet 6950 All-in-One Printer series - update to 001.2224A
HP OfficeJet 6960 All-in-One Printer series - update to 001.2225A
HP OfficeJet Pro 6960 All-in-One Printer series - update to 001.2225A
HP OfficeJet Pro 6970 All-in-One Printer series - update to 001.2225A
HP OfficeJet Pro 8210 Printer series - update to 001.2225B
HP OfficeJet Pro 8740 All-in-One Printer series - update to 001.2225B
HP OfficeJet Pro 8730 All-in-One Printer - update to 001.2225B
HP OfficeJet Pro 7740 Wide Format All-in-One Printer series - update to 002.2226A
HP OfficeJet Pro 7730 Wide Format All-in-One Printer - update to 003.2226A
HP OfficeJet Pro 7720 Wide Format All-in-One Printer series - update to 003.2226A
HP OfficeJet 8022e All-in-One Printer - update to 004.2222A
HP PageWide Pro 772dw Multifunction Printer - update to 006.2225A
HP PageWide Pro 772dn Multifunction Printer - update to 006.2225A
HP PageWide Pro 750dw Printer - update to 006.2225A
HP PageWide Pro 750dn Printer - update to 006.2225A
HP PageWide Managed P77760z Multifunction Printer - update to 006.2225A
HP PageWide Managed P77750z Multifunction Printer - update to 006.2225A
HP PageWide Managed P77740z Multifunction Printer - update to 006.2225A
HP PageWide Managed P77740dw Multifunction Printer - update to 006.2225A
HP PageWide Managed P77740dn Multifunction Printer - update to 006.2225A
HP PageWide Managed P75050dw - update to 006.2225A
HP PageWide Managed P75050dn - update to 006.2225A
HP PageWide Pro 452dn Printer series - update to 2228B
HP PageWide Pro 452dw Printer series - update to 2228B
HP PageWide Pro 477dn Multifunction Printer series - update to 2228B
HP PageWide Pro 477dw Multifunction Printer series - update to 2228B
HP PageWide Pro 552dw Printer series - update to 2228B
HP PageWide Pro 577 Multifunction Printer series - update to 2228B
HP PageWide Managed P57750dw Multifunction Printer - update to 2228B
HP PageWide Managed P55250dw Printer series - update to 2228B
HP PageWide 377dw Multifunction Printer - update to 2228B
HP PageWide 352dw Printer - update to 2228B

• https://support.hp.com/us-en/document/ish_6839789-6839813-16/HPSBPI03810

• Multiple vulnerabilities in HP LaserJet Pro printers, PageWide Pro printers and inkjet printers