The Malawi Computer Emergency Response Team (Malawi CERT) warns of a vulnerability reported by HP concerning certain LaserJet printer models. The vulnerability, identified as CVE-2023-1707 and assigned a critical severity score of 9.1, could result in the disclosure of sensitive information. It affects specific HP Enterprise LaserJet and HP LaserJet Managed Printers that have IPsec enabled with FutureSmart version 5.6.
HP plans to release a firmware update to address the vulnerability within 90 days. Meanwhile, users can take preventative measures by downgrading their firmware to version 5.5.0.3.
Malawi CERT advises affected organizations to follow HP’s guidance and urges all those utilizing these printer models to implement proactive security measures to safeguard their networks and systems against potential attacks.
List of Affected Products
| Product Name | Product Number |
| HP Color LaserJet Enterprise M455 | 3PZ95A |
| HP Color LaserJet Enterprise MFP M480 | 3QA55A |
| HP Color LaserJet Managed E45028 | 3QA35A |
| HP Color LaserJet Managed MFP E47528 | 3QA75A |
| HP Color LaserJet Managed MFP E785dn, HP Color LaserJet Managed MFP E78523, E78528 | 5QJ83A, 5QK15A, 5QJ81A |
| HP Color LaserJet Managed MFP E786, HP Color LaserJet Managed Flow MFP E786, HP Color LaserJet Managed MFP E78625/30/35, HP Color LaserJet Managed Flow MFP E78625/30/35 | 3SJ32A, 3SJ33A, 3SJ34A, 3SJ11A, 3SJ12A, 3SJ13A, 5QK18A, 5QJ94A, 5QJ90A |
| HP Color LaserJet Managed MFP E877, E87740/50/60/70, HP Color LaserJet Managed Flow E87740/50/60/70 | 5QK03A, 5QK08A, 5QK20A, 3SJ19A, 3SJ20A, 3SJ21A, 3SJ22A, 3SJ35A, 3SJ36A, 3SJ37A, 3SJ38A |
| HP LaserJet Enterprise M406 | 3PZ15A |
| HP LaserJet Enterprise M407 | 3PZ16A |
| HP LaserJet Enterprise MFP M430 | 3PZ55A |
| HP LaserJet Enterprise MFP M431 | 3PZ56A |
| HP LaserJet Managed E40040 | 3PZ35A |
| HP LaserJet Managed MFP E42540 | 3PZ75A |
| HP LaserJet Managed MFP E730, HP LaserJet Managed MFP E73025, E73030 | 5QJ87A. 3SJ03A, 3SJ04A |
| HP LaserJet Managed MFP E731, HP LaserJet Managed Flow MFP M731, HP LaserJet Managed MFP E73130/35/40, HP LaserJet Managed Flow MFP E73130/35/40 | 5QJ98A, 5QK02A, 3SJ00A, 3SJ01A, 3SJ02A, 6BS57A, 6BS58A, 6BS59A |
| HP LaserJet Managed MFP E826dn, HP LaserJet Managed Flow MFP E826z, HP LaserJet Managed E82650/60/70, HP LaserJet Managed E82650/60/70 | 5QK09A, 5QK13A, 3SJ07A, 3SJ08A, 3SJ09A, 3SJ28A, 3SJ29A, 3SJ30A |