Details of VAR-201810-1159

ID

VAR-201810-1159

CVE

CVE-2018-5921

TITLE

certain HP printers and MFPs Vulnerable to cross-site request forgery

Trust: 0.8

sources: JVNDB: JVNDB-2018-010876

DESCRIPTION

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege. certain HP printers and MFPs Contains a cross-site request forgery vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. HP MFPs are a series of MFP printers produced by Hewlett-Packard (HP) in the United States. A remote attacker could exploit this vulnerability to elevate privileges

Trust: 1.8

sources: NVD: CVE-2018-5921 // JVNDB: JVNDB-2018-010876 // VULHUB: VHN-135953 // VULMON: CVE-2018-5921

AFFECTED PRODUCTS

vendor:	hp	model:	l3u47a	scope:	lt	version:	2405129_000042	Trust: 1.0
vendor:	hp	model:	a2w78a	scope:	lt	version:	2405129_000057	Trust: 1.0
vendor:	hp	model:	g1w39a	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	l3u62a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	z8z07a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	x3a80a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	ca251a	scope:	lt	version:	2405129_000042	Trust: 1.0
vendor:	hp	model:	k0q17a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	g1w41a	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	j7z99a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	j8a17a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	b5l46a	scope:	lt	version:	2405129_000038	Trust: 1.0
vendor:	hp	model:	l3u40a	scope:	lt	version:	2405129_000050	Trust: 1.0
vendor:	hp	model:	j7x28a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	l3u61a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	z8z08a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	l3u64a	scope:	lt	version:	2405129_000058	Trust: 1.0
vendor:	hp	model:	x3a72a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	x3a69a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	l3u48a	scope:	lt	version:	2405129_000042	Trust: 1.0
vendor:	hp	model:	x3a89a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	j8j63a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	cz244a	scope:	lt	version:	2405129_000059	Trust: 1.0
vendor:	hp	model:	l8z07a	scope:	lt	version:	2405129_000047	Trust: 1.0
vendor:	hp	model:	l3u44a	scope:	lt	version:	2405129_000051	Trust: 1.0
vendor:	hp	model:	cd645a	scope:	lt	version:	2405135_000409	Trust: 1.0
vendor:	hp	model:	x3a93a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	b5l47a	scope:	lt	version:	2405129_000038	Trust: 1.0
vendor:	hp	model:	l3u46a	scope:	lt	version:	2405129_000045	Trust: 1.0
vendor:	hp	model:	l2762a	scope:	lt	version:	2405087_018553	Trust: 1.0
vendor:	hp	model:	cz245a	scope:	lt	version:	2405129_000059	Trust: 1.0
vendor:	hp	model:	x3a62a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	x3a79a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	z8z20a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	x3a77a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	k0q19a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	j8a05a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	f2a78v	scope:	lt	version:	2405129_000039	Trust: 1.0
vendor:	hp	model:	f2a81a	scope:	lt	version:	2405129_000039	Trust: 1.0
vendor:	hp	model:	j8j66a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	a2w76a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	g1w46v	scope:	lt	version:	2405129_000051	Trust: 1.0
vendor:	hp	model:	z8z22a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	x3a81a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	m0p36a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	j7z06a	scope:	lt	version:	2405087_018564	Trust: 1.0
vendor:	hp	model:	b5l54a	scope:	lt	version:	2405129_000038	Trust: 1.0
vendor:	hp	model:	x3a84a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	cd644a	scope:	lt	version:	2405135_000409	Trust: 1.0
vendor:	hp	model:	c2s12v	scope:	lt	version:	2405129_000055	Trust: 1.0
vendor:	hp	model:	p7z47a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	k0q14a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	l3u41a	scope:	lt	version:	2405129_000050	Trust: 1.0
vendor:	hp	model:	x3a74a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	b5l39a	scope:	lt	version:	2405129_000056	Trust: 1.0
vendor:	hp	model:	g1w40a	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	l3u66a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	b5l07a	scope:	lt	version:	2405129_000050	Trust: 1.0
vendor:	hp	model:	l3u69a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	l3u65a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	z8z21a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	z8z02a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	g1w47v	scope:	lt	version:	2405129_000051	Trust: 1.0
vendor:	hp	model:	f2a70a	scope:	lt	version:	2405129_000052	Trust: 1.0
vendor:	hp	model:	b5l49a	scope:	lt	version:	2405129_000038	Trust: 1.0
vendor:	hp	model:	a2w77a	scope:	lt	version:	2405129_000057	Trust: 1.0
vendor:	hp	model:	c2s11v	scope:	lt	version:	2405129_000055	Trust: 1.0
vendor:	hp	model:	l3u45a	scope:	lt	version:	2405129_000045	Trust: 1.0
vendor:	hp	model:	cf068a	scope:	lt	version:	2405129_000058	Trust: 1.0
vendor:	hp	model:	m0p33a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	e6b73a	scope:	lt	version:	2405129_000046	Trust: 1.0
vendor:	hp	model:	d7p73a	scope:	lt	version:	2405129_000057	Trust: 1.0
vendor:	hp	model:	d7p68a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	j8j78a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	z8z13a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	m0p39a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	j8j72a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	j8j67a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	cc522a	scope:	lt	version:	2405135_000405	Trust: 1.0
vendor:	hp	model:	x3a87a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	f2a79a	scope:	lt	version:	2405129_000039	Trust: 1.0
vendor:	hp	model:	j7z04a	scope:	lt	version:	2405087_018564	Trust: 1.0
vendor:	hp	model:	z8z15a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	b3g85a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	b5l04a	scope:	lt	version:	2405129_000050	Trust: 1.0
vendor:	hp	model:	j8j79a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	z8z01a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	f2a76a	scope:	lt	version:	2405129_000039	Trust: 1.0
vendor:	hp	model:	l3u57a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	j8a16a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	h0dc9a	scope:	lt	version:	2405129_000047	Trust: 1.0
vendor:	hp	model:	l3u60a	scope:	lt	version:	2405129_000048	Trust: 1.0
vendor:	hp	model:	j8a10a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	cf118a	scope:	lt	version:	2405129_000048	Trust: 1.0
vendor:	hp	model:	z8z04a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	cc524a	scope:	lt	version:	2405135_000405	Trust: 1.0
vendor:	hp	model:	k0q15a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	z8z18a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	x3a59a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	x3a86a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	j8j73a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	cz248a	scope:	lt	version:	2405129_000042	Trust: 1.0
vendor:	hp	model:	l3u70a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	x3a63a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	cf116a	scope:	lt	version:	2405129_000048	Trust: 1.0
vendor:	hp	model:	l3u50a	scope:	lt	version:	2405135_000405	Trust: 1.0
vendor:	hp	model:	x3a71a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	l3u59a	scope:	lt	version:	2405129_000048	Trust: 1.0
vendor:	hp	model:	b5l05a	scope:	lt	version:	2405129_000050	Trust: 1.0
vendor:	hp	model:	k0q22a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	z8z03a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	f2a80a	scope:	lt	version:	2405129_000039	Trust: 1.0
vendor:	hp	model:	cd646a	scope:	lt	version:	2405129_000045	Trust: 1.0
vendor:	hp	model:	cz250a	scope:	lt	version:	2405129_000042	Trust: 1.0
vendor:	hp	model:	j8j80a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	l2683a	scope:	lt	version:	2405087_018552	Trust: 1.0
vendor:	hp	model:	m0p40a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	z8z06a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	c2s12a	scope:	lt	version:	2405129_000055	Trust: 1.0
vendor:	hp	model:	cz249a	scope:	lt	version:	2405129_000042	Trust: 1.0
vendor:	hp	model:	g1w40v	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	l3u56a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	g1w41v	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	f2a77a	scope:	lt	version:	2405129_000039	Trust: 1.0
vendor:	hp	model:	z8z11a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	cf066a	scope:	lt	version:	2405129_000058	Trust: 1.0
vendor:	hp	model:	j8a12a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	z8z16a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	d7p71a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	j8a04a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	x3a65a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	l3u42a	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	d7p70a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	z8z14a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	z8z12a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	x3a75a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	b3g84a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	d7p68a	scope:	lt	version:	2405129_000060	Trust: 1.0
vendor:	hp	model:	b5l26a	scope:	lt	version:	2405129_000056	Trust: 1.0
vendor:	hp	model:	j8j64a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	f2a71a	scope:	lt	version:	2405129_000052	Trust: 1.0
vendor:	hp	model:	g1w46a	scope:	lt	version:	2405129_000051	Trust: 1.0
vendor:	hp	model:	z8z19a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	z8z10a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	m0p35a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	g1w47a	scope:	lt	version:	2405129_000051	Trust: 1.0
vendor:	hp	model:	l3u44a	scope:	lt	version:	2405135_000394	Trust: 1.0
vendor:	hp	model:	j7z98a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	k0q21a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	k0q18a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	b3g86a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	c2s11a	scope:	lt	version:	2405129_000055	Trust: 1.0
vendor:	hp	model:	cf117a	scope:	lt	version:	2405129_000048	Trust: 1.0
vendor:	hp	model:	a2w75a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	f2a67a	scope:	lt	version:	2405129_000052	Trust: 1.0
vendor:	hp	model:	z8z23a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hp	model:	g1w39v	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	x3a83a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	b5l50a	scope:	lt	version:	2405129_000038	Trust: 1.0
vendor:	hp	model:	cf367a	scope:	lt	version:	2405129_000060	Trust: 1.0
vendor:	hp	model:	j8a06a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	k0q20a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	z8z00a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	l3u52a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	j8a11a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	j8j70a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	l3u51a	scope:	lt	version:	2405129_000054	Trust: 1.0
vendor:	hp	model:	x3a92a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	l3u67a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	x3a66a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	l3u49a	scope:	lt	version:	2405135_000405	Trust: 1.0
vendor:	hp	model:	z8z09a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	l1h45a	scope:	lt	version:	2405129_000055	Trust: 1.0
vendor:	hp	model:	j8j65a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	l3u65a	scope:	lt	version:	2405129_000060	Trust: 1.0
vendor:	hp	model:	x3a90a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	j8j74a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	cf069a	scope:	lt	version:	2405129_000058	Trust: 1.0
vendor:	hp	model:	z8z17a	scope:	lt	version:	2405347_024814	Trust: 1.0
vendor:	hp	model:	x3a60a	scope:	lt	version:	2405347_024821	Trust: 1.0
vendor:	hp	model:	b5l06a	scope:	lt	version:	2405129_000050	Trust: 1.0
vendor:	hp	model:	a2w79a	scope:	lt	version:	2405129_000057	Trust: 1.0
vendor:	hp	model:	p7z48a	scope:	lt	version:	2405129_000040	Trust: 1.0
vendor:	hp	model:	j8j76a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	l3u63a	scope:	lt	version:	2405129_000058	Trust: 1.0
vendor:	hp	model:	b5l48a	scope:	lt	version:	2405129_000038	Trust: 1.0
vendor:	hp	model:	j8j71a	scope:	lt	version:	2405129_000041	Trust: 1.0
vendor:	hp	model:	z8z05a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	x3a78a	scope:	lt	version:	2405347_024820	Trust: 1.0
vendor:	hp	model:	m0p32a	scope:	lt	version:	2405130_000069	Trust: 1.0
vendor:	hp	model:	l3u43a	scope:	lt	version:	2405129_000066	Trust: 1.0
vendor:	hp	model:	e6b71a	scope:	lt	version:	2405129_000046	Trust: 1.0
vendor:	hp	model:	l3u55a	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	cf067a	scope:	lt	version:	2405129_000058	Trust: 1.0
vendor:	hp	model:	cc523a	scope:	lt	version:	2405135_000405	Trust: 1.0
vendor:	hp	model:	j8a13a	scope:	lt	version:	2405129_000037	Trust: 1.0
vendor:	hp	model:	x3a68a	scope:	lt	version:	2405347_024815	Trust: 1.0
vendor:	hewlett packard	model:	f2a70a	scope:	-	version:	-	Trust: 0.8
vendor:	hp	model:	c2s12a	scope:	eq	version:	2308214_000906	Trust: 0.6
vendor:	hp	model:	g1w46v	scope:	eq	version:	2308214_000910	Trust: 0.6
vendor:	hp	model:	c2s11a	scope:	eq	version:	2308214_000906	Trust: 0.6
vendor:	hp	model:	g1w46a	scope:	eq	version:	-	Trust: 0.6
vendor:	hp	model:	b5l26a	scope:	eq	version:	2308214_000907	Trust: 0.6
vendor:	hp	model:	c2s12a	scope:	eq	version:	-	Trust: 0.6
vendor:	hp	model:	g1w46a	scope:	eq	version:	2308214_000910	Trust: 0.6
vendor:	hp	model:	c2s11a	scope:	eq	version:	-	Trust: 0.6
vendor:	hp	model:	b5l26a	scope:	eq	version:	-	Trust: 0.6
vendor:	hp	model:	g1w46v	scope:	eq	version:	-	Trust: 0.6

sources: JVNDB: JVNDB-2018-010876 // CNNVD: CNNVD-201810-131 // NVD: CVE-2018-5921

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-5921
value:	HIGH
Trust: 1.0
NVD:	CVE-2018-5921
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201810-131
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-135953
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2018-5921
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2018-5921
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-135953
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-5921
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-135953 // VULMON: CVE-2018-5921 // JVNDB: JVNDB-2018-010876 // CNNVD: CNNVD-201810-131 // NVD: CVE-2018-5921

PROBLEMTYPE DATA

problemtype:

CWE-352

Trust: 1.9

sources: VULHUB: VHN-135953 // JVNDB: JVNDB-2018-010876 // NVD: CVE-2018-5921

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201810-131

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-201810-131

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-010876

PATCH

title:	c05949322	url:	https://support.hp.com/us-en/document/c05949322	Trust: 0.8
title:	HP printers and MFPs Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=86186	Trust: 0.6
title:	HP: HPSBPI03580 rev. 1 - Certain HP Enterprise Printer and MFP Products; Certain HP PageWide Printer and MFP Products - Cross Site Request Forgery	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=HPSBPI03580	Trust: 0.1
title:	HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03580 rev. 2 - Cross Site Request Forgery Vulnerability for Certain HP Enterprise and PageWide Printers	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=cb479e0f062c3b9a4f8d389ab47cc386	Trust: 0.1
title:	HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03580 rev. 2 - Cross Site Request Forgery Vulnerability for Certain HP Enterprise and PageWide Printers	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=d60ab7cb4f21ce9773b46418a7f67619	Trust: 0.1

sources: VULMON: CVE-2018-5921 // JVNDB: JVNDB-2018-010876 // CNNVD: CNNVD-201810-131

EXTERNAL IDS

db:	NVD	id:	CVE-2018-5921	Trust: 2.6
db:	JVNDB	id:	JVNDB-2018-010876	Trust: 0.8
db:	CNNVD	id:	CNNVD-201810-131	Trust: 0.7
db:	VULHUB	id:	VHN-135953	Trust: 0.1
db:	VULMON	id:	CVE-2018-5921	Trust: 0.1

sources: VULHUB: VHN-135953 // VULMON: CVE-2018-5921 // JVNDB: JVNDB-2018-010876 // CNNVD: CNNVD-201810-131 // NVD: CVE-2018-5921

REFERENCES

url:	https://support.hp.com/us-en/document/c05949322	Trust: 1.9
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-5921	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-5921	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/352.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULHUB: VHN-135953 // VULMON: CVE-2018-5921 // JVNDB: JVNDB-2018-010876 // CNNVD: CNNVD-201810-131 // NVD: CVE-2018-5921

SOURCES

db:	VULHUB	id:	VHN-135953
db:	VULMON	id:	CVE-2018-5921
db:	JVNDB	id:	JVNDB-2018-010876
db:	CNNVD	id:	CNNVD-201810-131
db:	NVD	id:	CVE-2018-5921

LAST UPDATE DATE

2024-11-23T22:58:49.939000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-135953	date:	2018-11-27T00:00:00
db:	VULMON	id:	CVE-2018-5921	date:	2018-11-27T00:00:00
db:	JVNDB	id:	JVNDB-2018-010876	date:	2018-12-26T00:00:00
db:	CNNVD	id:	CNNVD-201810-131	date:	2018-10-16T00:00:00
db:	NVD	id:	CVE-2018-5921	date:	2024-11-21T04:09:42.497

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-135953	date:	2018-10-03T00:00:00
db:	VULMON	id:	CVE-2018-5921	date:	2018-10-03T00:00:00
db:	JVNDB	id:	JVNDB-2018-010876	date:	2018-12-26T00:00:00
db:	CNNVD	id:	CNNVD-201810-131	date:	2018-10-08T00:00:00
db:	NVD	id:	CVE-2018-5921	date:	2018-10-03T20:29:18.520