CVE-2021-3704 Denial of service in HP LaserJet Pro M501 Series J8H61A; HP LaserJet Pro M501 Series J8H60A
Attackers can cause a Denial of Service on HP LaserJet Pro printers, disrupting printing services for users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-3704?
CVE-2021-3704 is a high-severity denial of service vulnerability in HP LaserJet Pro M501 Series J8H61A; HP LaserJet Pro M501 Series J8H60A, published on 1 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device.
Which versions are affected by CVE-2021-3704?
It affects 2 products.
Products include Hp Laserjet Pro J8h60a Firmware, Hp Laserjet Pro J8h61a Firmware.
How do I fix CVE-2021-3704?
No fix has been published for CVE-2021-3704 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-3704 being exploited?
There is no known exploitation of CVE-2021-3704 in the wild and no public exploit code.
Other vulnerabilities in HP LaserJet Pro M501 Series J8H61A; HP LaserJet Pro M501 Series J8H60A
Sources
Also known as GHSA-4xj3-j2jq-5hjr.