← Vulnerability feed

Vulnerability record · CVE-2023-27972 · published 28 April 2023

CVE-2023-27972: Hp laserjet pro m304-m305 w1a46a firmware classic buffer overflow vulnerability

Hp · Laserjet Pro M304 M305 W1a46a Firmware

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.

9.8 CVSS 3.1 Critical EPSS 1.5% · top 26.8% CWE-120 · Classic buffer overflow
9.8CVSS 3.1 base score
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
38Affected product versions listed by NVD
2References
25 Jun 2026Last modified by NVD

Description

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

38 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hp.com/us-en/document/ish_7920078-7920104-16/hpsbpi03840 Vendor Advisory
https://support.hp.com/us-en/document/ish_7920078-7920104-16/hpsbpi03840 Vendor Advisory

Track CVE-2023-27972 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-35175Hp w1a75a firmware server-side request forgery (ssrf) vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Re…EPSS 1.4%9.8CVE-2023-27973Hp laserjet pro m304-m305 w1a46a firmware out-of-bounds write vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.EPSS 1.5%9.8CVE-2023-27971Hp laserjet pro m304-m305 w1a46a firmware classic buffer overflow vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.EPSS 0.90%9.8CVE-2022-24292Hp laserjet pro m453-m454 w1y40a firmware vulnerabilityCertain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.EPSS 7.3%9.8CVE-2022-24293Hp laserjet pro m453-m454 w1y40a firmware vulnerabilityCertain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.EPSS 7.3%8.8CVE-2023-35176Hp w1a75a firmware classic buffer overflow vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature…EPSS 0.43%8.8CVE-2023-35177Hp w1a75a firmware out-of-bounds write vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.EPSS 0.38%8.8CVE-2023-35178Hp w1a75a firmware classic buffer overflow vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.EPSS 0.40%

Source: NIST National Vulnerability Database (record CVE-2023-27972), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.