CVE-2023-35175
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code...
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
- Record
CVE-2023-35175- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-02
CVE List No score
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
- Record
CVE-2023-35175- Updated
- 2026-11-02
EUVDEUVD-2023-39178
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
- Record
EUVD-2023-39178- CVSS
- 0.0 None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m29g-62vq-8hcx
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code...
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
- Record
GHSA-m29g-62vq-8hcx- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-02
Affected products
- hp laserjet pro
- hp laserjet pro m304-m305 w1a46a firmware
- hp laserjet pro m304-m305 w1a47a firmware
- hp laserjet pro m304-m305 w1a48a firmware
- hp laserjet pro m304-m305 w1a66a firmware
- hp laserjet pro m404-m405 93m22a firmware
- hp laserjet pro m404-m405 w1a51a firmware
- hp laserjet pro m404-m405 w1a52a firmware
- hp laserjet pro m404-m405 w1a53a firmware
- hp laserjet pro m404-m405 w1a56a firmware
- hp laserjet pro m404-m405 w1a57a firmware
- hp laserjet pro m404-m405 w1a58a firmware
Show 28 moreShow less
- hp laserjet pro m404-m405 w1a59a firmware
- hp laserjet pro m404-m405 w1a60a firmware
- hp laserjet pro m404-m405 w1a63a firmware
- hp laserjet pro m453-m454 w1y40a firmware
- hp laserjet pro m453-m454 w1y41a firmware
- hp laserjet pro m453-m454 w1y43a firmware
- hp laserjet pro m453-m454 w1y44a firmware
- hp laserjet pro m453-m454 w1y45a firmware
- hp laserjet pro m453-m454 w1y46a firmware
- hp laserjet pro m453-m454 w1y47a firmware
- hp laserjet pro mfp m428-m429 f w1a29a firmware
- hp laserjet pro mfp m428-m429 f w1a30a firmware
- hp laserjet pro mfp m428-m429 f w1a32a firmware
- hp laserjet pro mfp m428-m429 f w1a34a firmware
- hp laserjet pro mfp m428-m429 f w1a35a firmware
- hp laserjet pro mfp m428-m429 f w1a38a firmware
- hp laserjet pro mfp m428-m429 w1a28a firmware
- hp laserjet pro mfp m428-m429 w1a31a firmware
- hp laserjet pro mfp m428-m429 w1a33a firmware
- hp w1a75a firmware
- hp w1a76a firmware
- hp w1a77a firmware
- hp w1a78a firmware
- hp w1a79a firmware
- hp w1a80a firmware
- hp w1a81a firmware
- hp w1a82a firmware
- hp inc. laserjet pro
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-35175 is a critical vulnerability (CVSS 9.8) in Hp Laserjet Pro, published June 30, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. No source names a fixed version.