← Vulnerability feed

Vulnerability record · CVE-2023-35175 · published 30 June 2023

CVE-2023-35175: Hp w1a75a firmware server-side request forgery (ssrf) vulnerability

Hp · W1a75a Firmware

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

9.8 CVSS 3.1 Critical EPSS 1.4% · top 27.8% CWE-918 · Server-side request forgery (SSRF)
9.8CVSS 3.1 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
38Affected product versions listed by NVD
2References
25 Jun 2026Last modified by NVD

Description

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

38 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hp.com/us-en/document/ish_8651322-8651446-16/hpsbpi03851 Vendor Advisory
https://support.hp.com/us-en/document/ish_8651322-8651446-16/hpsbpi03851 Vendor Advisory

Track CVE-2023-35175 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-27973Hp laserjet pro m304-m305 w1a46a firmware out-of-bounds write vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.EPSS 1.5%9.8CVE-2023-27971Hp laserjet pro m304-m305 w1a46a firmware classic buffer overflow vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.EPSS 0.90%9.8CVE-2023-27972Hp laserjet pro m304-m305 w1a46a firmware classic buffer overflow vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.EPSS 1.5%9.8CVE-2022-24292Hp laserjet pro m453-m454 w1y40a firmware vulnerabilityCertain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.EPSS 7.3%9.8CVE-2022-24293Hp laserjet pro m453-m454 w1y40a firmware vulnerabilityCertain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.EPSS 7.3%8.8CVE-2023-35176Hp w1a75a firmware classic buffer overflow vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature…EPSS 0.43%8.8CVE-2023-35177Hp w1a75a firmware out-of-bounds write vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.EPSS 0.38%8.8CVE-2023-35178Hp w1a75a firmware classic buffer overflow vulnerabilityCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.EPSS 0.40%

Source: NIST National Vulnerability Database (record CVE-2023-35175), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.