HP LaserJet Printers Improper Verification of Cryptographic Signature (CVE-2018-5923)

critical Tenable OT Security Plugin ID 505934

Synopsis

The remote OT asset is affected by a vulnerability.

Description

In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

See Also

https://support.hp.com/us-en/document/c06169434

Plugin Details

Severity: Critical

ID: 505934

File Name: tenable_ot_hp_CVE-2018-5923.nasl

Version: 1.1

Type: Remote

Family: Tenable.ot

Published: 8/3/2026

Updated: 8/3/2026

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.15

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2018-5923

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/o:hp:color_laserjet_cm4540_mfp_firmware, cpe:/o:hp:color_laserjet_cp5525_firmware, cpe:/o:hp:color_laserjet_enterprise_flow_mfp_m681f_firmware, cpe:/o:hp:color_laserjet_enterprise_flow_mfp_m681z_firmware, cpe:/o:hp:color_laserjet_enterprise_flow_mfp_m682z_firmware, cpe:/o:hp:color_laserjet_enterprise_m552_firmware, cpe:/o:hp:color_laserjet_enterprise_m553_firmware, cpe:/o:hp:color_laserjet_enterprise_m651_firmware:2308974_579770, cpe:/o:hp:color_laserjet_enterprise_m651_firmware:2406048_029632, cpe:/o:hp:color_laserjet_enterprise_m652dn_firmware, cpe:/o:hp:color_laserjet_enterprise_m652n_firmware, cpe:/o:hp:color_laserjet_enterprise_m653dh_firmware, cpe:/o:hp:color_laserjet_enterprise_m653dn_firmware, cpe:/o:hp:color_laserjet_enterprise_m653x_firmware, cpe:/o:hp:color_laserjet_enterprise_m750_firmware, cpe:/o:hp:color_laserjet_enterprise_mfp_m577_firmware:2308974_579760, cpe:/o:hp:color_laserjet_enterprise_mfp_m577_firmware:2406048_029627, cpe:/o:hp:color_laserjet_enterprise_mfp_m681dh_firmware, cpe:/o:hp:color_laserjet_enterprise_mfp_m681f_firmware, cpe:/o:hp:color_laserjet_enterprise_mfp_m682dh_firmware, cpe:/o:hp:color_laserjet_m680_firmware:2308974_579771, cpe:/o:hp:color_laserjet_m680_firmware:2406048_029633, cpe:/o:hp:color_laserjet_managed_e55040dw_firmware, cpe:/o:hp:color_laserjet_managed_e65050dn_firmware, cpe:/o:hp:color_laserjet_managed_e65060dn_firmware, cpe:/o:hp:color_laserjet_managed_e65060x_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e57540c_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e67550f_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e67560z_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e77822_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e77825_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e77830z_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e87640_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e87640z_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e87650_firmware, cpe:/o:hp:color_laserjet_managed_flow_mfp_e87660z_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e57540dn_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e67550dh_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e67560dh_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e77822_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e77825_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e77830dn_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e87640_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e87640dn_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e87650_firmware, cpe:/o:hp:color_laserjet_managed_mfp_e87660dn_firmware, cpe:/o:hp:laserjet_enterprise_500_color_mfp_m575dn_firmware:2308974_579774, cpe:/o:hp:laserjet_enterprise_500_color_mfp_m575dn_firmware:2406048_029634, cpe:/o:hp:laserjet_enterprise_500_mfp_m525f_firmware:2308974_579765, cpe:/o:hp:laserjet_enterprise_500_mfp_m525f_firmware:2406048_029635, cpe:/o:hp:laserjet_enterprise_600_m601_firmware, cpe:/o:hp:laserjet_enterprise_600_m602_firmware, cpe:/o:hp:laserjet_enterprise_600_m603xh_firmware, cpe:/o:hp:laserjet_enterprise_700_color_mfp_m775_firmware, cpe:/o:hp:laserjet_enterprise_700_m712xh_firmware, cpe:/o:hp:laserjet_enterprise_800_color_m855_firmware:2308974_579768, cpe:/o:hp:laserjet_enterprise_800_color_m855_firmware:2406048_029621, cpe:/o:hp:laserjet_enterprise_800_color_mfp_m880_firmware:2308974_579767, cpe:/o:hp:laserjet_enterprise_800_color_mfp_m880_firmware:2406048_029641, cpe:/o:hp:laserjet_enterprise_color_500_m551_firmware, cpe:/o:hp:laserjet_enterprise_color_flow_mfp_m575c_firmware:2308974_579774, cpe:/o:hp:laserjet_enterprise_color_flow_mfp_m575c_firmware:2406048_029634, cpe:/o:hp:laserjet_enterprise_flow_m830z_mfp_firmware:2308974_579769, cpe:/o:hp:laserjet_enterprise_flow_m830z_mfp_firmware:2406048_029645, cpe:/o:hp:laserjet_enterprise_flow_mfp_m525c_firmware:2308974_579765, cpe:/o:hp:laserjet_enterprise_flow_mfp_m525c_firmware:2406048_029635, cpe:/o:hp:laserjet_enterprise_flow_mfp_m630z_firmware:2308974_579755, cpe:/o:hp:laserjet_enterprise_flow_mfp_m630z_firmware:2406048_029631, cpe:/o:hp:laserjet_enterprise_flow_mfp_m631h_firmware, cpe:/o:hp:laserjet_enterprise_flow_mfp_m632z_firmware, cpe:/o:hp:laserjet_enterprise_flow_mfp_m633z_firmware, cpe:/o:hp:laserjet_enterprise_m4555_mfp_firmware, cpe:/o:hp:laserjet_enterprise_m506_firmware, cpe:/o:hp:laserjet_enterprise_m604_firmware, cpe:/o:hp:laserjet_enterprise_m605_firmware:2308974_579762, cpe:/o:hp:laserjet_enterprise_m606_firmware, cpe:/o:hp:laserjet_enterprise_m607dn_firmware, cpe:/o:hp:laserjet_enterprise_m607n_firmware, cpe:/o:hp:laserjet_enterprise_m608dh_firmware, cpe:/o:hp:laserjet_enterprise_m608dn_firmware, cpe:/o:hp:laserjet_enterprise_m608n_firmware, cpe:/o:hp:laserjet_enterprise_m608x_firmware, cpe:/o:hp:laserjet_enterprise_m609dh_firmware, cpe:/o:hp:laserjet_enterprise_m609dn_firmware, cpe:/o:hp:laserjet_enterprise_m609x_firmware, cpe:/o:hp:laserjet_enterprise_m806_firmware:2308974_579772, cpe:/o:hp:laserjet_enterprise_m806_firmware:2406048_029646, cpe:/o:hp:laserjet_enterprise_mfp_m527_firmware:2308974_579761, cpe:/o:hp:laserjet_enterprise_mfp_m527_firmware:2406048_029628, cpe:/o:hp:laserjet_enterprise_mfp_m630_firmware:2308974_579755, cpe:/o:hp:laserjet_enterprise_mfp_m630_firmware:2406048_029631, cpe:/o:hp:laserjet_enterprise_mfp_m631dn_firmware, cpe:/o:hp:laserjet_enterprise_mfp_m631z_firmware, cpe:/o:hp:laserjet_enterprise_mfp_m632fht_firmware, cpe:/o:hp:laserjet_enterprise_mfp_m632h_firmware, cpe:/o:hp:laserjet_enterprise_mfp_m633fh_firmware, cpe:/o:hp:laserjet_enterprise_mfp_m725_firmware:2308974_579773, cpe:/o:hp:laserjet_enterprise_mfp_m725_firmware:2406048_029644, cpe:/o:hp:laserjet_managed_e50045dw_firmware, cpe:/o:hp:laserjet_managed_e60055dn_firmware, cpe:/o:hp:laserjet_managed_e60065dn_firmware, cpe:/o:hp:laserjet_managed_e60065x_firmware, cpe:/o:hp:laserjet_managed_e60075dn_firmware, cpe:/o:hp:laserjet_managed_e60075x_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e52545c_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e62555dn_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e62565h_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e62565z_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e62575z_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e72525_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e72530_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e72535z_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e82540_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e82550_firmware, cpe:/o:hp:laserjet_managed_flow_mfp_e82560z_firmware, cpe:/o:hp:laserjet_managed_mfp_e52545dn_firmware, cpe:/o:hp:laserjet_managed_mfp_e62555dn_firmware, cpe:/o:hp:laserjet_managed_mfp_e62565hs_firmware, cpe:/o:hp:laserjet_managed_mfp_e72525_firmware, cpe:/o:hp:laserjet_managed_mfp_e72530_firmware, cpe:/o:hp:laserjet_managed_mfp_e72535dn_firmware, cpe:/o:hp:laserjet_managed_mfp_e82540_firmware, cpe:/o:hp:laserjet_managed_mfp_e82550_firmware, cpe:/o:hp:laserjet_managed_mfp_e82560dn_firmware

Required KB Items: Tenable.ot/HP

Patch Publication Date: 3/27/2019

Vulnerability Publication Date: 3/27/2019

Reference Information

CVE: CVE-2018-5923

CWE: 347