During installation with certain driver software or application packages an arbitrary code execution could occur.

Description

During installation with certain driver software or application packages an arbitrary code execution could occur.

Scores

EPSS (exploitation in 30 days)

2.3% · top 17% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

• Arbitrary code execution

Affected products

• HP LaserJet Printer; HP LaserJet Pro Printer; HP PageWide Printer; HP PageWide Pro Printer; HP inkjet Printer; HP OfficeJet Printer

  • affected before 61.111.01.9108
  • affected before 8.0.13284.929
  • affected before 11.0.19232.882
  • affected before 52.1.4899
  • affected before 14.0.19241.351
  • affected before 14.0.19232.485
  • affected before 10.0.16007.5
  • affected before 9.0.15316.203
  • affected before 11.0.16058.821
  • affected before 50.1.4584
  • affected before 16.0.19235.653
  • affected before 16.0.19233.658
  • affected before 10.0.15324.194
  • affected before 10.0.15324.199
  • affected before 49.1.4431
  • affected before 43.2.2509
  • affected before 49.1.4424
  • affected before 50.1.4533
  • affected before 44.7.2713
  • affected before 44.6.2710
  • affected before 14.0.15311.432
  • affected before 16.0.19117.636
  • affected before 15.0.15322.1207
  • affected ...

References (1)

• https://support.hp.com/us-en/document/c07058567 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2020-28419](https://trackcve.app/badge/CVE-2020-28419.svg)](https://trackcve.app/cve/CVE-2020-28419)

Record last updated 4 Aug 2024, 16:33 UTC.