CVE-2026-4682: HP Inc HP DeskJet 2800e All-in-One Printer series

Описание

Оригинално описание

Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft Windows–based network scanning protocol that allows a PC to discover scanners (and MFPs) on a network and send scan jobs to them without requiring vendor specific drivers or utilities.

Засегнати продукти

• HP Inc HP DeskJet 2800e All-in-One Printer series: преди <2612A
• HP Inc HP DeskJet 4200 All-in-One Printer series: преди <2612A
• HP Inc HP DeskJet Ink Advantage 4200 All-in-One Printer series: преди <2612A
• HP Inc HP DeskJet 4200e All-in-One Printer series: преди <2612A
• HP Inc HP DeskJet Ink Advantage Ultra 4900 series: преди <2612A
• HP Inc HP DeskJet Ink Advantage 2800 All-in-One Printer series: преди <2612A

Вид слабост

• CWE-121 Препълване на буфера в стека

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-4682
• https://nvd.nist.gov/vuln/detail/CVE-2026-4682
• https://support.hp.com/us-en/document/ish_14744451-14744475-16