CVE-2021-3821 Denial of service in HP FutureSmart
Attackers can cause a denial of service on HP multifunction printers running Workpath solutions, requiring vendor patches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-3821?
CVE-2021-3821 is a critical denial of service vulnerability in HP FutureSmart, published on 21 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.
Weakness: CWE-400
Which versions are affected by CVE-2021-3821?
It affects 1 product.
Products include Hp Futuresmart 5.
How do I fix CVE-2021-3821?
No fix has been published for CVE-2021-3821 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-3821 being exploited?
There is no known exploitation of CVE-2021-3821 in the wild and no public exploit code.
Other vulnerabilities in HP FutureSmart
Sources
Also known as GHSA-q57v-m3mv-29f2.