Is CVE-2018-5923 in the CISA KEV catalog?

No. CVE-2018-5923 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2018-5923?

CVE-2018-5923 has a CVSS v3 base score of 9.8 (CRITICAL).

What is the EPSS score for CVE-2018-5923?

CVE-2018-5923 has an EPSS score of 2.61% (83th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2018-5923?

Upgrade color laserjet cm4540 mfp firmware to 2308974_579754 or later. Fixes are available for 138 affected products.

CVE & CISA-KEV Catalog

CVE-2018-5923

CRITICALEPSS 83th pctl

9.8

CVSS v3

NVD

Description

In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code.

CWE-347

How to fix

Remediation Available

color laserjet cm4540 mfp firmwareNVD

Affected:< 2308974_579754Fixed in:2308974_579754CVE-2018-5923derived from NVD

color laserjet cp5525 firmwareNVD

Affected:< 2308974_579753Fixed in:2308974_579753CVE-2018-5923derived from NVD

color laserjet enterprise flow mfp m681f firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet enterprise flow mfp m681z firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet enterprise flow mfp m682z firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet enterprise m552 firmwareNVD

Affected:< 2308974_579763Fixed in:2308974_579763CVE-2018-5923derived from NVD

color laserjet enterprise m553 firmwareNVD

Affected:< 2308974_579763Fixed in:2308974_579763CVE-2018-5923derived from NVD

color laserjet enterprise m651 firmwareNVD

Affected:< 2308974_579770Fixed in:2308974_579770CVE-2018-5923derived from NVD

color laserjet enterprise m652dn firmwareNVD

Affected:< 2406087_000016Fixed in:2406087_000016CVE-2018-5923derived from NVD

color laserjet enterprise m652n firmwareNVD

Affected:< 2406087_000016Fixed in:2406087_000016CVE-2018-5923derived from NVD

color laserjet enterprise m653dh firmwareNVD

Affected:< 2406087_000016Fixed in:2406087_000016CVE-2018-5923derived from NVD

color laserjet enterprise m653dn firmwareNVD

Affected:< 2406087_000016Fixed in:2406087_000016CVE-2018-5923derived from NVD

color laserjet enterprise m653x firmwareNVD

Affected:< 2406087_000016Fixed in:2406087_000016CVE-2018-5923derived from NVD

color laserjet enterprise m750 firmwareNVD

Affected:< 2308974_579776Fixed in:2308974_579776CVE-2018-5923derived from NVD

color laserjet enterprise mfp m577 firmwareNVD

Affected:< 2308974_579760Fixed in:2308974_579760CVE-2018-5923derived from NVD

color laserjet enterprise mfp m681dh firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet enterprise mfp m681f firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet enterprise mfp m682dh firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet m680 firmwareNVD

Affected:< 2308974_579771Fixed in:2308974_579771CVE-2018-5923derived from NVD

color laserjet managed e55040dw firmwareNVD

Affected:< 2406048_029643Fixed in:2406048_029643CVE-2018-5923derived from NVD

color laserjet managed e65050dn firmwareNVD

Affected:< 2406087_000016Fixed in:2406087_000016CVE-2018-5923derived from NVD

color laserjet managed e65060dn firmwareNVD

Affected:< 2405130_000068Fixed in:2405130_000068CVE-2018-5923derived from NVD

color laserjet managed e65060x firmwareNVD

Affected:< 2405130_000068Fixed in:2405130_000068CVE-2018-5923derived from NVD

color laserjet managed flow mfp e57540c firmwareNVD

Affected:< 2406048_029627Fixed in:2406048_029627CVE-2018-5923derived from NVD

color laserjet managed flow mfp e67550f firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet managed flow mfp e67560z firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet managed flow mfp e77822 firmwareNVD

Affected:< 2406048_029616Fixed in:2406048_029616CVE-2018-5923derived from NVD

color laserjet managed flow mfp e77825 firmwareNVD

Affected:< 2406048_029616Fixed in:2406048_029616CVE-2018-5923derived from NVD

color laserjet managed flow mfp e77830z firmwareNVD

Affected:< 2406048_029616Fixed in:2406048_029616CVE-2018-5923derived from NVD

color laserjet managed flow mfp e87640 firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

color laserjet managed flow mfp e87640z firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

color laserjet managed flow mfp e87650 firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

color laserjet managed flow mfp e87660z firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

color laserjet managed mfp e57540dn firmwareNVD

Affected:< 2406048_029627Fixed in:2406048_029627CVE-2018-5923derived from NVD

color laserjet managed mfp e67550dh firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet managed mfp e67560dh firmwareNVD

Affected:< 2406087_000017Fixed in:2406087_000017CVE-2018-5923derived from NVD

color laserjet managed mfp e77822 firmwareNVD

Affected:< 2406048_029616Fixed in:2406048_029616CVE-2018-5923derived from NVD

color laserjet managed mfp e77825 firmwareNVD

Affected:< 2406048_029616Fixed in:2406048_029616CVE-2018-5923derived from NVD

color laserjet managed mfp e77830dn firmwareNVD

Affected:< 2406048_029616Fixed in:2406048_029616CVE-2018-5923derived from NVD

color laserjet managed mfp e87640 firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

color laserjet managed mfp e87640dn firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

color laserjet managed mfp e87650 firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

color laserjet managed mfp e87660dn firmwareNVD

Affected:< 2406048_029615Fixed in:2406048_029615CVE-2018-5923derived from NVD

digital sender flow 8500 fn2 document capture workstation firmwareNVD

Affected:< 2308937_578483Fixed in:2308937_578483CVE-2018-5923derived from NVD

laserjet enterprise 500 color mfp m575dn firmwareNVD

Affected:< 2308974_579774Fixed in:2308974_579774CVE-2018-5923derived from NVD

laserjet enterprise 500 mfp m525f firmwareNVD

Affected:< 2308974_579765Fixed in:2308974_579765CVE-2018-5923derived from NVD

laserjet enterprise 600 m601 firmwareNVD

Affected:< 2308974_579777Fixed in:2308974_579777CVE-2018-5923derived from NVD

laserjet enterprise 600 m602 firmwareNVD

Affected:< 2308974_579777Fixed in:2308974_579777CVE-2018-5923derived from NVD

laserjet enterprise 600 m603xh firmwareNVD

Affected:< 2308974_579777Fixed in:2308974_579777CVE-2018-5923derived from NVD

laserjet enterprise 700 color mfp m775 firmwareNVD

Affected:< 2308974_579779Fixed in:2308974_579779CVE-2018-5923derived from NVD

laserjet enterprise 700 m712xh firmwareNVD

Affected:< 2308974_579775Fixed in:2308974_579775CVE-2018-5923derived from NVD

laserjet enterprise 800 color m855 firmwareNVD

Affected:< 2308974_579768Fixed in:2308974_579768CVE-2018-5923derived from NVD

laserjet enterprise 800 color mfp m880 firmwareNVD

Affected:< 2308974_579767Fixed in:2308974_579767CVE-2018-5923derived from NVD

laserjet enterprise color 500 m551 firmwareNVD

Affected:< 2308974_579778Fixed in:2308974_579778CVE-2018-5923derived from NVD

laserjet enterprise color flow mfp m575c firmwareNVD

Affected:< 2308974_579774Fixed in:2308974_579774CVE-2018-5923derived from NVD

laserjet enterprise flow m830z mfp firmwareNVD

Affected:< 2308974_579769Fixed in:2308974_579769CVE-2018-5923derived from NVD

laserjet enterprise flow mfp m525c firmwareNVD

Affected:< 2308974_579765Fixed in:2308974_579765CVE-2018-5923derived from NVD

laserjet enterprise flow mfp m630z firmwareNVD

Affected:< 2308974_579755Fixed in:2308974_579755CVE-2018-5923derived from NVD

laserjet enterprise flow mfp m631h firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise flow mfp m632z firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise flow mfp m633z firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise m4555 mfp firmwareNVD

Affected:< 2308974_579757Fixed in:2308974_579757CVE-2018-5923derived from NVD

laserjet enterprise m506 firmwareNVD

Affected:< 2308974_579764Fixed in:2308974_579764CVE-2018-5923derived from NVD

laserjet enterprise m604 firmwareNVD

Affected:< 2308974_579762Fixed in:2308974_579762CVE-2018-5923derived from NVD

laserjet enterprise m605 firmwareNVD

Affected:< 2308974_579762Fixed in:2308974_579762CVE-2018-5923derived from NVD

laserjet enterprise m606 firmwareNVD

Affected:< 2308974_579762Fixed in:2308974_579762CVE-2018-5923derived from NVD

laserjet enterprise m607dn firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m607n firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m608dh firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m608dn firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m608n firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m608x firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m609dh firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m609dn firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m609x firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet enterprise m806 firmwareNVD

Affected:< 2308974_579772Fixed in:2308974_579772CVE-2018-5923derived from NVD

laserjet enterprise mfp m527 firmwareNVD

Affected:< 2308974_579761Fixed in:2308974_579761CVE-2018-5923derived from NVD

laserjet enterprise mfp m630 firmwareNVD

Affected:< 2308974_579755Fixed in:2308974_579755CVE-2018-5923derived from NVD

laserjet enterprise mfp m631dn firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise mfp m631z firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise mfp m632fht firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise mfp m632h firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise mfp m633fh firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet enterprise mfp m725 firmwareNVD

Affected:< 2308974_579773Fixed in:2308974_579773CVE-2018-5923derived from NVD

laserjet managed e50045dw firmwareNVD

Affected:< 2406048_029640Fixed in:2406048_029640CVE-2018-5923derived from NVD

laserjet managed e60055dn firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet managed e60065dn firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet managed e60065x firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet managed e60075dn firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet managed e60075x firmwareNVD

Affected:< 2406048_029638Fixed in:2406048_029638CVE-2018-5923derived from NVD

laserjet managed flow mfp e52545c firmwareNVD

Affected:< 2406048_029628Fixed in:2406048_029628CVE-2018-5923derived from NVD

laserjet managed flow mfp e62555dn firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet managed flow mfp e62565h firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet managed flow mfp e62565z firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet managed flow mfp e62575z firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet managed flow mfp e72525 firmwareNVD

Affected:< 2406048_029614Fixed in:2406048_029614CVE-2018-5923derived from NVD

laserjet managed flow mfp e72530 firmwareNVD

Affected:< 2406048_029614Fixed in:2406048_029614CVE-2018-5923derived from NVD

laserjet managed flow mfp e72535z firmwareNVD

Affected:< 2406048_029614Fixed in:2406048_029614CVE-2018-5923derived from NVD

laserjet managed flow mfp e82540 firmwareNVD

Affected:< 2406048_029617Fixed in:2406048_029617CVE-2018-5923derived from NVD

laserjet managed flow mfp e82550 firmwareNVD

Affected:< 2406048_029617Fixed in:2406048_029617CVE-2018-5923derived from NVD

laserjet managed flow mfp e82560z firmwareNVD

Affected:< 2406048_029617Fixed in:2406048_029617CVE-2018-5923derived from NVD

laserjet managed mfp e52545dn firmwareNVD

Affected:< 2406048_029628Fixed in:2406048_029628CVE-2018-5923derived from NVD

laserjet managed mfp e62555dn firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet managed mfp e62565hs firmwareNVD

Affected:< 2406048_029629Fixed in:2406048_029629CVE-2018-5923derived from NVD

laserjet managed mfp e72525 firmwareNVD

Affected:< 2406048_029614Fixed in:2406048_029614CVE-2018-5923derived from NVD

laserjet managed mfp e72530 firmwareNVD

Affected:< 2406048_029614Fixed in:2406048_029614CVE-2018-5923derived from NVD

laserjet managed mfp e72535dn firmwareNVD

Affected:< 2406048_029614Fixed in:2406048_029614CVE-2018-5923derived from NVD

laserjet managed mfp e82540 firmwareNVD

Affected:< 2406048_029617Fixed in:2406048_029617CVE-2018-5923derived from NVD

laserjet managed mfp e82550 firmwareNVD

Affected:< 2406048_029617Fixed in:2406048_029617CVE-2018-5923derived from NVD

laserjet managed mfp e82560dn firmwareNVD

Affected:< 2406048_029617Fixed in:2406048_029617CVE-2018-5923derived from NVD

officejet enterprise color flow mfp x585 firmwareNVD

Affected:< 2308974_579759Fixed in:2308974_579759CVE-2018-5923derived from NVD

officejet enterprise color mfp x585 firmwareNVD

Affected:< 2308974_579759Fixed in:2308974_579759CVE-2018-5923derived from NVD

officejet enterprise color x555dn firmwareNVD

Affected:< 2308974_579758Fixed in:2308974_579758CVE-2018-5923derived from NVD

officejet enterprise color x555xh firmwareNVD

Affected:< 2308974_579758Fixed in:2308974_579758CVE-2018-5923derived from NVD

pagewide enterprise color 765dn firmwareNVD

Affected:< 2406048_029619Fixed in:2406048_029619CVE-2018-5923derived from NVD

pagewide enterprise color flow mfp 586z firmwareNVD

Affected:< 2308974_579780Fixed in:2308974_579780CVE-2018-5923derived from NVD

pagewide enterprise color mfp 586dn firmwareNVD

Affected:< 2308974_579780Fixed in:2308974_579780CVE-2018-5923derived from NVD

pagewide enterprise color mfp 586f firmwareNVD

Affected:< 2308974_579780Fixed in:2308974_579780CVE-2018-5923derived from NVD

pagewide enterprise color mpf 780dn firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide enterprise color mpf 780f firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide enterprise color mpf 785f firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide enterprise color mpf 785zs firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide enterprise color x556dn firmwareNVD

Affected:< 2308974_579766Fixed in:2308974_579766CVE-2018-5923derived from NVD

pagewide enterprise color x556xh firmwareNVD

Affected:< 2308974_579766Fixed in:2308974_579766CVE-2018-5923derived from NVD

pagewide managed color e55650dn firmwareNVD

Affected:< 2308974_579766Fixed in:2308974_579766CVE-2018-5923derived from NVD

pagewide managed color e75160dn firmwareNVD

Affected:< 2406048_029619Fixed in:2406048_029619CVE-2018-5923derived from NVD

pagewide managed color flow mfp e58650z firmwareNVD

Affected:< 2308974_579780Fixed in:2308974_579780CVE-2018-5923derived from NVD

pagewide managed color flow mfp e77650z firmwareNVD

Affected:< 2406048_029624Fixed in:2406048_029624CVE-2018-5923derived from NVD

pagewide managed color flow mfp e77650zs firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide managed color flow mfp e77660dn firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide managed color flow mfp e77660z firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide managed color flow mfp e77660zs firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide managed color flow mfp e77660zts firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide managed color mfp e58650dn firmwareNVD

Affected:< 2308974_579780Fixed in:2308974_579780CVE-2018-5923derived from NVD

pagewide managed color mfp e77650dn firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

pagewide managed color mfp e77650dns firmwareNVD

Affected:< 2406048_029621Fixed in:2406048_029621CVE-2018-5923derived from NVD

scanjet enterprise 8500 document capture workstation firmwareNVD

Affected:< 2308974_579756Fixed in:2308974_579756CVE-2018-5923derived from NVD

scanjet enterprise flow n9120 document flatbed scanner firmwareNVD

Affected:< 2406048_029625Fixed in:2406048_029625CVE-2018-5923derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

2.61%probability of exploitation in 30 days

83rdpercentile

Elevated risk: more likely to be exploited than 83% of all known CVEs.

References

Vendor Advisory1

support.hp.com

Embed a live status badge for CVE-2018-5923

Markdown

[![CVE-2018-5923](https://tridentstack.com/cve/badge/CVE-2018-5923.svg)](https://tridentstack.com/cve/CVE-2018-5923)

HTML

<a href="https://tridentstack.com/cve/CVE-2018-5923"><img src="https://tridentstack.com/cve/badge/CVE-2018-5923.svg" alt="CVE-2018-5923"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.