Is CVE-2019-6318 in the CISA KEV catalog?

No. CVE-2019-6318 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2019-6318?

CVE-2019-6318 has a CVSS v3 base score of 9.8 (CRITICAL).

What is the EPSS score for CVE-2019-6318?

CVE-2019-6318 has an EPSS score of 2.61% (84th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2019-6318?

Upgrade color laserjet cm4540 mfp firmware to 2309010_581401 or later. Fixes are available for 143 affected products.

CVE & CISA-KEV Catalog

CVE-2019-6318

CRITICALEPSS 84th pctl

9.8

CVSS v3

NVD

Description

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

CWE-347

How to fix

Remediation Available

color laserjet cm4540 mfp firmwareNVD

Affected:< 2309010_581401Fixed in:2309010_581401CVE-2019-6318derived from NVD

color laserjet enterprise cp5525 firmwareNVD

Affected:< 2309010_581402Fixed in:2309010_581402CVE-2019-6318derived from NVD

color laserjet enterprise flow mfp m577 firmwareNVD

Affected:< 2407081_000571Fixed in:2407081_000571CVE-2019-6318derived from NVD

color laserjet enterprise flow mfp m680 firmwareNVD

Affected:< 2407081_000591Fixed in:2407081_000591CVE-2019-6318derived from NVD

color laserjet enterprise flow mfp m681 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet enterprise flow mfp m682 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet enterprise flow mfp m880z firmwareNVD

Affected:< 2407081_000599Fixed in:2407081_000599CVE-2019-6318derived from NVD

color laserjet enterprise m552 firmwareNVD

Affected:< 2407081_00060Fixed in:2407081_00060CVE-2019-6318derived from NVD

color laserjet enterprise m553 firmwareNVD

Affected:< 2309010_581409Fixed in:2309010_581409CVE-2019-6318derived from NVD

color laserjet enterprise m651 firmwareNVD

Affected:< 2407081_000585Fixed in:2407081_000585CVE-2019-6318derived from NVD

color laserjet enterprise m652 firmwareNVD

Affected:< 2407081_000586Fixed in:2407081_000586CVE-2019-6318derived from NVD

color laserjet enterprise m653 firmwareNVD

Affected:< 2407081_000586Fixed in:2407081_000586CVE-2019-6318derived from NVD

color laserjet enterprise m750 firmwareNVD

Affected:< 2309010_581423Fixed in:2309010_581423CVE-2019-6318derived from NVD

color laserjet enterprise m855 firmwareNVD

Affected:< 2407081_000589Fixed in:2407081_000589CVE-2019-6318derived from NVD

color laserjet enterprise mfp m577 firmwareNVD

Affected:< 2407081_000571Fixed in:2407081_000571CVE-2019-6318derived from NVD

color laserjet enterprise mfp m680 firmwareNVD

Affected:< 2407081_000591Fixed in:2407081_000591CVE-2019-6318derived from NVD

color laserjet enterprise mfp m681 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet enterprise mfp m682 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet managed e55040dw firmwareNVD

Affected:< 2407081_000601Fixed in:2407081_000601CVE-2019-6318derived from NVD

color laserjet managed e65050 firmwareNVD

Affected:< 2407081_000586Fixed in:2407081_000586CVE-2019-6318derived from NVD

color laserjet managed e65060 firmwareNVD

Affected:< 2407081_000586Fixed in:2407081_000586CVE-2019-6318derived from NVD

color laserjet managed flow mfp e57540 firmwareNVD

Affected:< 2407081_000571Fixed in:2407081_000571CVE-2019-6318derived from NVD

color laserjet managed flow mfp e6750 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet managed flow mfp e67560 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet managed flow mfp e77822 firmwareNVD

Affected:< 2407081_000644Fixed in:2407081_000644CVE-2019-6318derived from NVD

color laserjet managed flow mfp e77825 firmwareNVD

Affected:< 2407081_000644Fixed in:2407081_000644CVE-2019-6318derived from NVD

color laserjet managed flow mfp e77830 firmwareNVD

Affected:< 2407081_000644Fixed in:2407081_000644CVE-2019-6318derived from NVD

color laserjet managed flow mfp e87640 firmwareNVD

Affected:< 2407163_000224Fixed in:2407163_000224CVE-2019-6318derived from NVD

color laserjet managed flow mfp e87650 firmwareNVD

Affected:< 2407163_000224Fixed in:2407163_000224CVE-2019-6318derived from NVD

color laserjet managed flow mfp e87660 firmwareNVD

Affected:< 2407163_000224Fixed in:2407163_000224CVE-2019-6318derived from NVD

color laserjet managed flow mfp m577 firmwareNVD

Affected:< 2407081_000571Fixed in:2407081_000571CVE-2019-6318derived from NVD

color laserjet managed flow mfp m680 firmwareNVD

Affected:< 2407081_000591Fixed in:2407081_000591CVE-2019-6318derived from NVD

color laserjet managed flow mfp m880zm firmwareNVD

Affected:< 2407081_000599Fixed in:2407081_000599CVE-2019-6318derived from NVD

color laserjet managed m553 firmwareNVD

Affected:< 2407081_000601Fixed in:2407081_000601CVE-2019-6318derived from NVD

color laserjet managed m651 firmwareNVD

Affected:< 2407081_000585Fixed in:2407081_000585CVE-2019-6318derived from NVD

color laserjet managed mfp e57540 firmwareNVD

Affected:< 2407081_000571Fixed in:2407081_000571CVE-2019-6318derived from NVD

color laserjet managed mfp e67550 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet managed mfp e67560 firmwareNVD

Affected:< 2407081_000578Fixed in:2407081_000578CVE-2019-6318derived from NVD

color laserjet managed mfp e77822 firmwareNVD

Affected:< 2407081_000644Fixed in:2407081_000644CVE-2019-6318derived from NVD

color laserjet managed mfp e77825 firmwareNVD

Affected:< 2407081_000644Fixed in:2407081_000644CVE-2019-6318derived from NVD

color laserjet managed mfp e77830 firmwareNVD

Affected:< 2407081_000644Fixed in:2407081_000644CVE-2019-6318derived from NVD

color laserjet managed mfp e87640 firmwareNVD

Affected:< 2407163_000224Fixed in:2407163_000224CVE-2019-6318derived from NVD

color laserjet managed mfp e87650 firmwareNVD

Affected:< 2407163_000224Fixed in:2407163_000224CVE-2019-6318derived from NVD

color laserjet managed mfp e87660 firmwareNVD

Affected:< 2407163_000224Fixed in:2407163_000224CVE-2019-6318derived from NVD

color laserjet managed mfp m577 firmwareNVD

Affected:< 2407081_000571Fixed in:2407081_000571CVE-2019-6318derived from NVD

color laserjet managed mfp m680 firmwareNVD

Affected:< 2407081_000591Fixed in:2407081_000591CVE-2019-6318derived from NVD

color laserjet managed mfp m775 firmwareNVD

Affected:< 2407081_000583Fixed in:2407081_000583CVE-2019-6318derived from NVD

digital sender flow 8500 fn2 document capture workstation firmwareNVD

Affected:< 2407081_000590Fixed in:2407081_000590CVE-2019-6318derived from NVD

laserjet enterprise 500 color m551 firmwareNVD

Affected:< 2309010_581427Fixed in:2309010_581427CVE-2019-6318derived from NVD

laserjet enterprise 500 color mfp m575 firmwareNVD

Affected:< 2407081_000587Fixed in:2407081_000587CVE-2019-6318derived from NVD

laserjet enterprise 500 mfp m525f firmwareNVD

Affected:< 2407081_000594Fixed in:2407081_000594CVE-2019-6318derived from NVD

laserjet enterprise 600 m601 firmwareNVD

Affected:< 2309010_581425Fixed in:2309010_581425CVE-2019-6318derived from NVD

laserjet enterprise 600 m602 firmwareNVD

Affected:< 2309010_581425Fixed in:2309010_581425CVE-2019-6318derived from NVD

laserjet enterprise 600 m603 firmwareNVD

Affected:< 2309010_581425Fixed in:2309010_581425CVE-2019-6318derived from NVD

laserjet enterprise 700 color mfp m775 firmwareNVD

Affected:< 2407081_000583Fixed in:2407081_000583CVE-2019-6318derived from NVD

laserjet enterprise 700 m712 firmwareNVD

Affected:< 2309010_581422Fixed in:2309010_581422CVE-2019-6318derived from NVD

laserjet enterprise color flow mfp m575 firmwareNVD

Affected:< 2407081_000587Fixed in:2407081_000587CVE-2019-6318derived from NVD

laserjet enterprise flow mfp m525 firmwareNVD

Affected:< 2407081_000594Fixed in:2407081_000594CVE-2019-6318derived from NVD

laserjet enterprise flow mfp m527z firmwareNVD

Affected:< 2407081_000575Fixed in:2407081_000575CVE-2019-6318derived from NVD

laserjet enterprise flow mfp m630 firmwareNVD

Affected:< 2407081_000588Fixed in:2407081_000588CVE-2019-6318derived from NVD

laserjet enterprise flow mfp m631 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet enterprise flow mfp m632 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet enterprise flow mfp m633 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet enterprise flow mfp m830 firmwareNVD

Affected:< 2407081_000569Fixed in:2407081_000569CVE-2019-6318derived from NVD

laserjet enterprise m4555 mfp firmwareNVD

Affected:< 2309010_581404Fixed in:2309010_581404CVE-2019-6318derived from NVD

laserjet enterprise m506 firmwareNVD

Affected:< 2407081_000597Fixed in:2407081_000597CVE-2019-6318derived from NVD

laserjet enterprise m604 firmwareNVD

Affected:< 2407081_000593Fixed in:2407081_000593CVE-2019-6318derived from NVD

laserjet enterprise m605 firmwareNVD

Affected:< 2407081_000593Fixed in:2407081_000593CVE-2019-6318derived from NVD

laserjet enterprise m606 firmwareNVD

Affected:< 2407081_000593Fixed in:2407081_000593CVE-2019-6318derived from NVD

laserjet enterprise m607 firmwareNVD

Affected:< 2407081_000596Fixed in:2407081_000596CVE-2019-6318derived from NVD

laserjet enterprise m608 firmwareNVD

Affected:< 2407081_000596Fixed in:2407081_000596CVE-2019-6318derived from NVD

laserjet enterprise m609 firmwareNVD

Affected:< 2407081_000596Fixed in:2407081_000596CVE-2019-6318derived from NVD

laserjet enterprise m806 firmwareNVD

Affected:< 2407081_000574Fixed in:2407081_000574CVE-2019-6318derived from NVD

laserjet enterprise mfp m527 firmwareNVD

Affected:< 2407081_000575Fixed in:2407081_000575CVE-2019-6318derived from NVD

laserjet enterprise mfp m630 firmwareNVD

Affected:< 2407081_000588Fixed in:2407081_000588CVE-2019-6318derived from NVD

laserjet enterprise mfp m631 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet enterprise mfp m632 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet enterprise mfp m633 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet enterprise mfp m725 firmwareNVD

Affected:< 2407081_000570Fixed in:2407081_000570CVE-2019-6318derived from NVD

laserjet managed 500 color mfp m575 firmwareNVD

Affected:< 2407081_000587Fixed in:2407081_000587CVE-2019-6318derived from NVD

laserjet managed 500 mfp m525 firmwareNVD

Affected:< 2407081_000594Fixed in:2407081_000594CVE-2019-6318derived from NVD

laserjet managed color flow mfp m575 firmwareNVD

Affected:< 2407081_000587Fixed in:2407081_000587CVE-2019-6318derived from NVD

laserjet managed e50045 firmwareNVD

Affected:< 2407081_000597Fixed in:2407081_000597CVE-2019-6318derived from NVD

laserjet managed e60055 firmwareNVD

Affected:< 2407150_040194Fixed in:2407150_040194CVE-2019-6318derived from NVD

laserjet managed e60065 firmwareNVD

Affected:< 2407150_040194Fixed in:2407150_040194CVE-2019-6318derived from NVD

laserjet managed e60075 firmwareNVD

Affected:< 2407150_040194Fixed in:2407150_040194CVE-2019-6318derived from NVD

laserjet managed flow mfp e52545c firmwareNVD

Affected:< 2407081_000575Fixed in:2407081_000575CVE-2019-6318derived from NVD

laserjet managed flow mfp e62555 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet managed flow mfp e62565 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet managed flow mfp e62575 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet managed flow mfp e72525 firmwareNVD

Affected:< 2407081_000643Fixed in:2407081_000643CVE-2019-6318derived from NVD

laserjet managed flow mfp e72530 firmwareNVD

Affected:< 2407081_000643Fixed in:2407081_000643CVE-2019-6318derived from NVD

laserjet managed flow mfp e72535 firmwareNVD

Affected:< 2407081_000643Fixed in:2407081_000643CVE-2019-6318derived from NVD

laserjet managed flow mfp e82540 firmwareNVD

Affected:< 2407163_000218Fixed in:2407163_000218CVE-2019-6318derived from NVD

laserjet managed flow mfp e82550 firmwareNVD

Affected:< 2407163_000218Fixed in:2407163_000218CVE-2019-6318derived from NVD

laserjet managed flow mfp e82560 firmwareNVD

Affected:< 2407163_000218Fixed in:2407163_000218CVE-2019-6318derived from NVD

laserjet managed flow mfp m525 firmwareNVD

Affected:< 2407081_000594Fixed in:2407081_000594CVE-2019-6318derived from NVD

laserjet managed flow mfp m527z firmwareNVD

Affected:< 2407081_000575Fixed in:2407081_000575CVE-2019-6318derived from NVD

laserjet managed flow mfp m630 firmwareNVD

Affected:< 2407081_000588Fixed in:2407081_000588CVE-2019-6318derived from NVD

laserjet managed flow mfp m830 firmwareNVD

Affected:< 2407081_000569Fixed in:2407081_000569CVE-2019-6318derived from NVD

laserjet managed m506 firmwareNVD

Affected:< 2407081_000597Fixed in:2407081_000597CVE-2019-6318derived from NVD

laserjet managed m605 firmwareNVD

Affected:< 2407081_000593Fixed in:2407081_000593CVE-2019-6318derived from NVD

laserjet managed mfp e52545 firmwareNVD

Affected:< 2407081_000575Fixed in:2407081_000575CVE-2019-6318derived from NVD

laserjet managed mfp e62555 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet managed mfp e62565 firmwareNVD

Affected:< 2407081_000592Fixed in:2407081_000592CVE-2019-6318derived from NVD

laserjet managed mfp e72525 firmwareNVD

Affected:< 2407081_000643Fixed in:2407081_000643CVE-2019-6318derived from NVD

laserjet managed mfp e72530 firmwareNVD

Affected:< 2407081_000643Fixed in:2407081_000643CVE-2019-6318derived from NVD

laserjet managed mfp e72535 firmwareNVD

Affected:< 2407081_000643Fixed in:2407081_000643CVE-2019-6318derived from NVD

laserjet managed mfp e82540 firmwareNVD

Affected:< 2407163_000218Fixed in:2407163_000218CVE-2019-6318derived from NVD

laserjet managed mfp e82550 firmwareNVD

Affected:< 2407163_000218Fixed in:2407163_000218CVE-2019-6318derived from NVD

laserjet managed mfp e82560 firmwareNVD

Affected:< 2407163_000218Fixed in:2407163_000218CVE-2019-6318derived from NVD

laserjet managed mfp m527 firmwareNVD

Affected:< 2407081_000575Fixed in:2407081_000575CVE-2019-6318derived from NVD

laserjet managed mfp m630 firmwareNVD

Affected:< 2407081_000588Fixed in:2407081_000588CVE-2019-6318derived from NVD

laserjet managed mfp m725 firmwareNVD

Affected:< 2407081_000570Fixed in:2407081_000570CVE-2019-6318derived from NVD

officejet enterprise color flow mfp x585 firmwareNVD

Affected:< 2407081_000567Fixed in:2407081_000567CVE-2019-6318derived from NVD

officejet enterprise color mfp x585 firmwareNVD

Affected:< 2407081_000567Fixed in:2407081_000567CVE-2019-6318derived from NVD

officejet enterprise color x555 firmwareNVD

Affected:< 2407081_000595Fixed in:2407081_000595CVE-2019-6318derived from NVD

officejet managed color flow mfp x585 firmwareNVD

Affected:< 2407081_000567Fixed in:2407081_000567CVE-2019-6318derived from NVD

officejet managed color mfp x585 firmwareNVD

Affected:< 2407081_000567Fixed in:2407081_000567CVE-2019-6318derived from NVD

pagewide color 755 firmwareNVD

Affected:< 2407081_000573Fixed in:2407081_000573CVE-2019-6318derived from NVD

pagewide color mfp 774 firmwareNVD

Affected:< 2407163_000240Fixed in:2407163_000240CVE-2019-6318derived from NVD

pagewide color mfp 779 firmwareNVD

Affected:< 2407163_000240Fixed in:2407163_000240CVE-2019-6318derived from NVD

pagewide enterprise color 556 firmwareNVD

Affected:< 2309010_581412Fixed in:2309010_581412CVE-2019-6318derived from NVD

pagewide enterprise color 765 firmwareNVD

Affected:< 2407081_000573Fixed in:2407081_000573CVE-2019-6318derived from NVD

pagewide enterprise color flow mfp 586z firmwareNVD

Affected:< 2407081_000584Fixed in:2407081_000584CVE-2019-6318derived from NVD

pagewide enterprise color flow mfp 780f firmwareNVD

Affected:< 2407163_000211Fixed in:2407163_000211CVE-2019-6318derived from NVD

pagewide enterprise color flow mpf 785 firmwareNVD

Affected:< 2407163_000211Fixed in:2407163_000211CVE-2019-6318derived from NVD

pagewide enterprise color mfp 586 firmwareNVD

Affected:< 2407081_000584Fixed in:2407081_000584CVE-2019-6318derived from NVD

pagewide enterprise color mfp 780 firmwareNVD

Affected:< 2407163_000211Fixed in:2407163_000211CVE-2019-6318derived from NVD

pagewide managed color e55650 firmwareNVD

Affected:< 2407081_000598Fixed in:2407081_000598CVE-2019-6318derived from NVD

pagewide managed color e75160 firmwareNVD

Affected:< 2407081_000573Fixed in:2407081_000573CVE-2019-6318derived from NVD

pagewide managed color flow mfp e58650z firmwareNVD

Affected:< 2407081_000584Fixed in:2407081_000584CVE-2019-6318derived from NVD

pagewide managed color flow mfp e77650 firmwareNVD

Affected:< 2407163_000211Fixed in:2407163_000211CVE-2019-6318derived from NVD

pagewide managed color flow mfp e77660z firmwareNVD

Affected:< 2407163_000211Fixed in:2407163_000211CVE-2019-6318derived from NVD

pagewide managed color mfp e58650dn firmwareNVD

Affected:< 2407081_000584Fixed in:2407081_000584CVE-2019-6318derived from NVD

pagewide managed color mfp e77650 firmwareNVD

Affected:< 2407163_000211Fixed in:2407163_000211CVE-2019-6318derived from NVD

pagewide managed color mfp p77440 firmwareNVD

Affected:< 2407163_000240Fixed in:2407163_000240CVE-2019-6318derived from NVD

pagewide managed color mfp p77940 firmwareNVD

Affected:< 2407163_000240Fixed in:2407163_000240CVE-2019-6318derived from NVD

pagewide managed color mfp p77950 firmwareNVD

Affected:< 2407163_000240Fixed in:2407163_000240CVE-2019-6318derived from NVD

pagewide managed color mfp p77960 firmwareNVD

Affected:< 2407163_000240Fixed in:2407163_000240CVE-2019-6318derived from NVD

pagewide managed color p75250 firmwareNVD

Affected:< 2407081_000573Fixed in:2407081_000573CVE-2019-6318derived from NVD

scanjet enterprise 8500 fn1 document capture workstation firmwareNVD

Affected:< 2309010_581403Fixed in:2309010_581403CVE-2019-6318derived from NVD

scanjet enterprise flow n9120 fn2 document scanner firmwareNVD

Affected:< 2407081_000577Fixed in:2407081_000577CVE-2019-6318derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

2.61%probability of exploitation in 30 days

84thpercentile

Elevated risk: more likely to be exploited than 84% of all known CVEs.

References

Vendor Advisory1

support.hp.com

Embed a live status badge for CVE-2019-6318

Markdown

[![CVE-2019-6318](https://tridentstack.com/cve/badge/CVE-2019-6318.svg)](https://tridentstack.com/cve/CVE-2019-6318)

HTML

<a href="https://tridentstack.com/cve/CVE-2019-6318"><img src="https://tridentstack.com/cve/badge/CVE-2019-6318.svg" alt="CVE-2019-6318"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.