CVE-2019-6337

MEDIUM
5.2
CVSS Score
Published: November 7, 2019 at 02:37 PM UTC
Updated: June 17, 2026 at 02:39 AM UTC
94 products affected across 1 vendorJ3P68A FirmwareD9L63A FirmwareD9L64A Firmware

Using HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series by N/A?

Get instant alerts when new vulnerabilities affect HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.2
Exploit prediction
EPSS 0.4%

Description

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-2dr21d (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q15a (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q15b (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q15d (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q16a (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q16d (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q17a (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q17d (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q19a (same device)
v < 001.1937d
Affected range stops below 001.1937d, so it looks safe — our inference, not a vendor statement
hp-d3q19b (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (1)

CVSS

Attack Vector
PHYSICAL
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card