CVE-2023-27971
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or...
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
- Record
CVE-2023-27971- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
- Record
CVE-2023-27971- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2023-31697
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
- Record
EUVD-2023-31697- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vp48-mr57-w2x7
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or...
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
- Record
GHSA-vp48-mr57-w2x7- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
- hp laserjet pro
- hp laserjet pro m304-m305 w1a46a firmware
- hp laserjet pro m304-m305 w1a47a firmware
- hp laserjet pro m304-m305 w1a48a firmware
- hp laserjet pro m304-m305 w1a66a firmware
- hp laserjet pro m404-m405 93m22a firmware
- hp laserjet pro m404-m405 w1a51a firmware
- hp laserjet pro m404-m405 w1a52a firmware
- hp laserjet pro m404-m405 w1a53a firmware
- hp laserjet pro m404-m405 w1a56a firmware
- hp laserjet pro m404-m405 w1a57a firmware
- hp laserjet pro m404-m405 w1a58a firmware
Show 28 moreShow less
- hp laserjet pro m404-m405 w1a59a firmware
- hp laserjet pro m404-m405 w1a60a firmware
- hp laserjet pro m404-m405 w1a63a firmware
- hp laserjet pro m453-m454 w1y40a firmware
- hp laserjet pro m453-m454 w1y41a firmware
- hp laserjet pro m453-m454 w1y43a firmware
- hp laserjet pro m453-m454 w1y44a firmware
- hp laserjet pro m453-m454 w1y45a firmware
- hp laserjet pro m453-m454 w1y46a firmware
- hp laserjet pro m453-m454 w1y47a firmware
- hp laserjet pro mfp m428-m429 f w1a29a firmware
- hp laserjet pro mfp m428-m429 f w1a30a firmware
- hp laserjet pro mfp m428-m429 f w1a32a firmware
- hp laserjet pro mfp m428-m429 f w1a34a firmware
- hp laserjet pro mfp m428-m429 f w1a35a firmware
- hp laserjet pro mfp m428-m429 f w1a38a firmware
- hp laserjet pro mfp m428-m429 w1a28a firmware
- hp laserjet pro mfp m428-m429 w1a31a firmware
- hp laserjet pro mfp m428-m429 w1a33a firmware
- hp w1a75a firmware
- hp w1a76a firmware
- hp w1a77a firmware
- hp w1a78a firmware
- hp w1a79a firmware
- hp w1a80a firmware
- hp w1a81a firmware
- hp w1a82a firmware
- hp inc. laserjet pro
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-27971 is a critical vulnerability (CVSS 9.8) in Hp Laserjet Pro, published April 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. No source names a fixed version.