Approved changes feed: RSS · Atom

cpe:2.3:a:hp_inc.:hp_2800_printer_series:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHp Inc. (f56354f8-55af-554a-af8f-3971154cc9bd)
ProductHp 2800 Printer Series (a1166634-e312-5793-ab61-e3651a6cfee2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-13753 vulnerable 2026-07-29 00:23:33.274928 CVE-2026-13753
A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series Printers running firmware version <=TBP1CN2612AR. An unauthenticated attacker with network access can send GET requests to multiple exposed administrative API endpoints and retrieve sensitive configuration data such as plaintext Wi‑Fi Direct credentials, unique device identity information, and other administrative security state details. When accessed through the web interface, these setting pages explicitly require administrator credentials before sensitive information is displayed.
Published: 2026-07-06T18:00:06.663Z
Updated: 2026-07-08T17:00:16.985Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.