CVE-2021-3965

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-3965
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://support.hp.com/us-en/document/ish_5268198-5268230-16 Vendor Advisory
https://support.hp.com/us-en/document/ish_5268198-5268230-16 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:designjet_t920_cr355a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t920_cr355a:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hp:designjet_t920_cr355b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t920_cr355b:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hp:designjet_t920_cr354a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t920_cr354a:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hp:designjet_t930_l2y22a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y22a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hp:designjet_t930_l2y22b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y22b:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hp:designjet_t930_l2y21a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y21a:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hp:designjet_t930_l2y21b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y21b:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hp:designjet_t1530_l2y24a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t1530_l2y24a:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:hp:designjet_t1530_l2y24b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t1530_l2y24b:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:hp:designjet_t1530_l2y23a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t1530_l2y23a:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:hp:designjet_t2530_l2y25a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t2530_l2y25a:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:hp:designjet_t2530_l2y26a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t2530_l2y26a:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:hp:designjet_t2530_l2y26b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t2530_l2y26b:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:hp:designjet_t3500_b9e24a_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t3500_b9e24a:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:hp:designjet_t3500_b9e24b_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t3500_b9e24b:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:hp:designjet_t3500_b9e25a_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t3500_b9e25a:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:hp:designjet_z6800_f2s72a_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6800_f2s72a:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:hp:designjet_z6800_f2s72ar_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6800_f2s72ar:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:hp:designjet_z6800_f2s72b_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6800_f2s72b:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:hp:designjet_z6600_f2s71a_firmware:ptr6_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6600_f2s71a:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:hp:designjet_z6600_f2s71ar_firmware:ptr6_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6600_f2s71ar:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:hp:designjet_z6810_2qu12a_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu12a:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:hp:designjet_z6810_2qu12b_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu12b:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:hp:designjet_z6810_2qu14a_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu14a:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:hp:designjet_z6810_2qu14b_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu14b:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:hp:designjet_z6610_2qu13b_firmware:px6_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6610_2qu13b:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:hp:designjet_z6610_2qu13a_firmware:px6_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6610_2qu13a:-:*:*:*:*:*:*:*
History

21 Nov 2024, 06:23

Type Values Removed Values Added
References () https://support.hp.com/us-en/document/ish_5268198-5268230-16 - Vendor Advisory () https://support.hp.com/us-en/document/ish_5268198-5268230-16 - Vendor Advisory

24 Jan 2022, 19:38

Type Values Removed Values Added
References (MISC) https://support.hp.com/us-en/document/ish_5268198-5268230-16 - (MISC) https://support.hp.com/us-en/document/ish_5268198-5268230-16 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : 5.0
v3 : 7.5
CWE CWE-639
CPE cpe:2.3:o:hp:designjet_t930_l2y22b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t3500_b9e25a:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6800_f2s72b_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t2530_l2y26b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t3500_b9e25a_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t920_cr354a:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t920_cr355b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t2530_l2y25a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu14b:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t930_l2y22a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu12a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu14a:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6810_2qu12b_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6800_f2s72a_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t920_cr354a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t2530_l2y26a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6610_2qu13b:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t1530_l2y24a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t930_l2y21a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6610_2qu13a_firmware:px6_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6800_f2s72a:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t930_l2y21b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y22a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6800_f2s72b:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t920_cr355b:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t2530_l2y26a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6600_f2s71a_firmware:ptr6_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t920_cr355a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t1530_l2y23a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6610_2qu13a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y22b:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t1530_l2y24a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t1530_l2y24b:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6810_2qu12b:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y21b:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6800_f2s72ar:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t3500_b9e24b:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t3500_b9e24a:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t1530_l2y24b_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t920_cr355a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6600_f2s71a:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6600_f2s71ar_firmware:ptr6_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t2530_l2y26b:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6810_2qu14b_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6800_f2s72ar_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6810_2qu14a_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t2530_l2y25a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t1530_l2y23a_firmware:mry_07_07_04.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t3500_b9e24b_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6810_2qu12a_firmware:px8_06_05_02.1:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_t3500_b9e24a_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_t930_l2y21a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:designjet_z6600_f2s71ar:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:designjet_z6610_2qu13b_firmware:px6_06_05_02.1:*:*:*:*:*:*:*

14 Jan 2022, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-01-14 20:15

Updated : 2024-11-21 06:23

NVD link : CVE-2021-3965

Mitre link : CVE-2021-3965

CVE.ORG link : CVE-2021-3965

JSON object : View

Products Affected

hp

  • designjet_t2530_l2y26a_firmware
  • designjet_z6810_2qu12a_firmware
  • designjet_t2530_l2y26b
  • designjet_t1530_l2y23a_firmware
  • designjet_z6600_f2s71a
  • designjet_t3500_b9e24b_firmware
  • designjet_t2530_l2y25a
  • designjet_z6810_2qu14a_firmware
  • designjet_z6810_2qu14a
  • designjet_t930_l2y22b
  • designjet_z6600_f2s71a_firmware
  • designjet_t930_l2y21b_firmware
  • designjet_t930_l2y21a
  • designjet_z6810_2qu12b_firmware
  • designjet_z6800_f2s72a_firmware
  • designjet_t1530_l2y24a_firmware
  • designjet_t930_l2y22b_firmware
  • designjet_t920_cr354a_firmware
  • designjet_t1530_l2y24b_firmware
  • designjet_z6810_2qu12b
  • designjet_t2530_l2y25a_firmware
  • designjet_z6800_f2s72a
  • designjet_t3500_b9e24b
  • designjet_z6600_f2s71ar
  • designjet_t2530_l2y26b_firmware
  • designjet_z6610_2qu13a
  • designjet_t2530_l2y26a
  • designjet_z6800_f2s72ar
  • designjet_z6810_2qu14b_firmware
  • designjet_t920_cr355a
  • designjet_t3500_b9e24a
  • designjet_t920_cr355a_firmware
  • designjet_t3500_b9e25a
  • designjet_t3500_b9e24a_firmware
  • designjet_z6600_f2s71ar_firmware
  • designjet_t930_l2y22a
  • designjet_t3500_b9e25a_firmware
  • designjet_z6810_2qu12a
  • designjet_t1530_l2y24b
  • designjet_t920_cr354a
  • designjet_t920_cr355b_firmware
  • designjet_z6800_f2s72ar_firmware
  • designjet_z6610_2qu13a_firmware
  • designjet_t1530_l2y24a
  • designjet_t930_l2y21a_firmware
  • designjet_z6610_2qu13b_firmware
  • designjet_z6800_f2s72b_firmware
  • designjet_z6800_f2s72b
  • designjet_t1530_l2y23a
  • designjet_z6610_2qu13b
  • designjet_z6810_2qu14b
  • designjet_t930_l2y22a_firmware
  • designjet_t930_l2y21b
  • designjet_t920_cr355b
CWE
CWE-639

Authorization Bypass Through User-Controlled Key