CVE-2024-9423 | Certain HP LaserJet Printers – Potential Denial of Service

Certain HP LaserJet printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer. The printer displays a “JPEG Unsupported” message which may not clear, potentially blocking queued print jobs.

Published: 2024-10-02 Last update: 2026-06-17 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2024-9423 is rated Low Risk (36.1/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.55%). Mandatory action: Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2024-9423

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.19% 0.55% +0.36%
2 2026-02-25 0.05% 0.19% +0.15%
3 2025-11-21 0.05%

Full EPSS history (9 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2024-9423

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.3 3.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:N)
Data isn’t meaningfully altered or forged.
Availability (A:L)
Might cause slowdowns, glitches, or partial disruption—not a full brick.
3.9 1.4 [email protected]
5.3 3.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:N)
Data isn’t meaningfully altered or forged.
Availability (A:L)
Might cause slowdowns, glitches, or partial disruption—not a full brick.
3.9 1.4 [email protected]

Weakness enumeration for CVE-2024-9423

Affected software / configurations for CVE-2024-9423

Vendor Product Version Raw CPE
hp 9yf88a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf88a_firmware:*:*:*:*:*:*:*:*
hp 9yf89a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf89a_firmware:*:*:*:*:*:*:*:*
hp 9yf90a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf90a_firmware:*:*:*:*:*:*:*:*
hp 9yf91a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf91a_firmware:*:*:*:*:*:*:*:*
hp 9yf91e_firmware < 2024-08-13 cpe:2.3:o:hp:9yf91e_firmware:*:*:*:*:*:*:*:*
hp 9yf92a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf92a_firmware:*:*:*:*:*:*:*:*
hp 9yf94a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf94a_firmware:*:*:*:*:*:*:*:*
hp 9yf95a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf95a_firmware:*:*:*:*:*:*:*:*
hp 9yf96a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf96a_firmware:*:*:*:*:*:*:*:*
hp 9yf97a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf97a_firmware:*:*:*:*:*:*:*:*
hp 9yf98a_firmware < 2024-08-13 cpe:2.3:o:hp:9yf98a_firmware:*:*:*:*:*:*:*:*
hp 9yg02a_firmware < 2024-08-13 cpe:2.3:o:hp:9yg02a_firmware:*:*:*:*:*:*:*:*
hp 9yg02e_firmware < 2024-08-13 cpe:2.3:o:hp:9yg02e_firmware:*:*:*:*:*:*:*:*
hp 9yg05a_firmware < 2024-08-13 cpe:2.3:o:hp:9yg05a_firmware:*:*:*:*:*:*:*:*
hp 9yg05e_firmware < 2024-08-13 cpe:2.3:o:hp:9yg05e_firmware:*:*:*:*:*:*:*:*
hp 9yg08a_firmware < 2024-08-13 cpe:2.3:o:hp:9yg08a_firmware:*:*:*:*:*:*:*:*
hp 9yg09a_firmware < 2024-08-13 cpe:2.3:o:hp:9yg09a_firmware:*:*:*:*:*:*:*:*
hp 9yg10a_firmware < 2024-08-13 cpe:2.3:o:hp:9yg10a_firmware:*:*:*:*:*:*:*:*
hp 9yg11a_firmware < 2024-08-13 cpe:2.3:o:hp:9yg11a_firmware:*:*:*:*:*:*:*:*
hp 2u582a_firmware < 2024-08-13 cpe:2.3:o:hp:2u582a_firmware:*:*:*:*:*:*:*:*
hp 2u584a_firmware < 2024-08-13 cpe:2.3:o:hp:2u584a_firmware:*:*:*:*:*:*:*:*
hp 7md66a_firmware < 2024-08-13 cpe:2.3:o:hp:7md66a_firmware:*:*:*:*:*:*:*:*
hp 7md68a_firmware < 2024-08-13 cpe:2.3:o:hp:7md68a_firmware:*:*:*:*:*:*:*:*
hp 2u587a_firmware < 2024-08-13 cpe:2.3:o:hp:2u587a_firmware:*:*:*:*:*:*:*:*
hp 2u581a_firmware < 2024-08-13 cpe:2.3:o:hp:2u581a_firmware:*:*:*:*:*:*:*:*
hp 7md65a_firmware < 2024-08-13 cpe:2.3:o:hp:7md65a_firmware:*:*:*:*:*:*:*:*
hp 7md67a_firmware < 2024-08-13 cpe:2.3:o:hp:7md67a_firmware:*:*:*:*:*:*:*:*
hp 2u586a_firmware < 2024-08-13 cpe:2.3:o:hp:2u586a_firmware:*:*:*:*:*:*:*:*
hp 2u582e_firmware < 2024-08-13 cpe:2.3:o:hp:2u582e_firmware:*:*:*:*:*:*:*:*
hp 2u584e_firmware < 2024-08-13 cpe:2.3:o:hp:2u584e_firmware:*:*:*:*:*:*:*:*
hp 7md66e_firmware < 2024-08-13 cpe:2.3:o:hp:7md66e_firmware:*:*:*:*:*:*:*:*
hp 7md68e_firmware < 2024-08-13 cpe:2.3:o:hp:7md68e_firmware:*:*:*:*:*:*:*:*
hp 2u587e_firmware < 2024-08-13 cpe:2.3:o:hp:2u587e_firmware:*:*:*:*:*:*:*:*
hp 381u3a_firmware < 2024-08-13 cpe:2.3:o:hp:381u3a_firmware:*:*:*:*:*:*:*:*
hp 381u4a_firmware < 2024-08-13 cpe:2.3:o:hp:381u4a_firmware:*:*:*:*:*:*:*:*
hp 2r3e7a_firmware < 2024-08-13 cpe:2.3:o:hp:2r3e7a_firmware:*:*:*:*:*:*:*:*
hp 2r3e8a_firmware < 2024-08-13 cpe:2.3:o:hp:2r3e8a_firmware:*:*:*:*:*:*:*:*
hp 381l0a_firmware < 2024-08-13 cpe:2.3:o:hp:381l0a_firmware:*:*:*:*:*:*:*:*
hp 2r3f0a_firmware < 2024-08-13 cpe:2.3:o:hp:2r3f0a_firmware:*:*:*:*:*:*:*:*
hp 2r7f5a_firmware < 2024-08-13 cpe:2.3:o:hp:2r7f5a_firmware:*:*:*:*:*:*:*:*
hp 381v4a_firmware < 2024-08-13 cpe:2.3:o:hp:381v4a_firmware:*:*:*:*:*:*:*:*
hp 1y7d4a_firmware < 2024-08-13 cpe:2.3:o:hp:1y7d4a_firmware:*:*:*:*:*:*:*:*
hp 2a129a_firmware < 2024-08-13 cpe:2.3:o:hp:2a129a_firmware:*:*:*:*:*:*:*:*
hp 2a130a_firmware < 2024-08-13 cpe:2.3:o:hp:2a130a_firmware:*:*:*:*:*:*:*:*
hp 2a130e_firmware < 2024-08-13 cpe:2.3:o:hp:2a130e_firmware:*:*:*:*:*:*:*:*
hp 2u589a_firmware < 2024-08-13 cpe:2.3:o:hp:2u589a_firmware:*:*:*:*:*:*:*:*
hp 2u589e_firmware < 2024-08-13 cpe:2.3:o:hp:2u589e_firmware:*:*:*:*:*:*:*:*
hp 2u589f_firmware < 2024-08-13 cpe:2.3:o:hp:2u589f_firmware:*:*:*:*:*:*:*:*
hp 6gw61a_firmware < 2024-08-13 cpe:2.3:o:hp:6gw61a_firmware:*:*:*:*:*:*:*:*
hp 6gw62a_firmware < 2024-08-13 cpe:2.3:o:hp:6gw62a_firmware:*:*:*:*:*:*:*:*
hp 6gw62e_firmware < 2024-08-13 cpe:2.3:o:hp:6gw62e_firmware:*:*:*:*:*:*:*:*
hp 6gw62er_firmware < 2024-08-13 cpe:2.3:o:hp:6gw62er_firmware:*:*:*:*:*:*:*:*
hp 6gw63a_firmware < 2024-08-13 cpe:2.3:o:hp:6gw63a_firmware:*:*:*:*:*:*:*:*
hp 6gw71a_firmware < 2024-08-13 cpe:2.3:o:hp:6gw71a_firmware:*:*:*:*:*:*:*:*
hp 6gw99a_firmware < 2024-08-13 cpe:2.3:o:hp:6gw99a_firmware:*:*:*:*:*:*:*:*
hp 6gw99e_firmware < 2024-08-13 cpe:2.3:o:hp:6gw99e_firmware:*:*:*:*:*:*:*:*
hp 6gx00a_firmware < 2024-08-13 cpe:2.3:o:hp:6gx00a_firmware:*:*:*:*:*:*:*:*
hp 6gx00e_firmware < 2024-08-13 cpe:2.3:o:hp:6gx00e_firmware:*:*:*:*:*:*:*:*
hp 6gx01a_firmware < 2024-08-13 cpe:2.3:o:hp:6gx01a_firmware:*:*:*:*:*:*:*:*
hp 6gx02e_firmware < 2024-08-13 cpe:2.3:o:hp:6gx02e_firmware:*:*:*:*:*:*:*:*
hp 6gx03a_firmware < 2024-08-13 cpe:2.3:o:hp:6gx03a_firmware:*:*:*:*:*:*:*:*
hp 6gx04a_firmware < 2024-08-13 cpe:2.3:o:hp:6gx04a_firmware:*:*:*:*:*:*:*:*
hp 6gx05a_firmware < 2024-08-13 cpe:2.3:o:hp:6gx05a_firmware:*:*:*:*:*:*:*:*
hp 6gx05e_firmware < 2024-08-13 cpe:2.3:o:hp:6gx05e_firmware:*:*:*:*:*:*:*:*
hp 6gx06a_firmware < 2024-08-13 cpe:2.3:o:hp:6gx06a_firmware:*:*:*:*:*:*:*:*
hp 6gx09a_firmware < 2024-08-13 cpe:2.3:o:hp:6gx09a_firmware:*:*:*:*:*:*:*:*
hp 6gx09e_firmware < 2024-08-13 cpe:2.3:o:hp:6gx09e_firmware:*:*:*:*:*:*:*:*
hp 7md69a_firmware < 2024-08-13 cpe:2.3:o:hp:7md69a_firmware:*:*:*:*:*:*:*:*
hp 7md70a_firmware < 2024-08-13 cpe:2.3:o:hp:7md70a_firmware:*:*:*:*:*:*:*:*
hp 7md70e_firmware < 2024-08-13 cpe:2.3:o:hp:7md70e_firmware:*:*:*:*:*:*:*:*
hp 7md70f_firmware < 2024-08-13 cpe:2.3:o:hp:7md70f_firmware:*:*:*:*:*:*:*:*
hp 7md71a_firmware < 2024-08-13 cpe:2.3:o:hp:7md71a_firmware:*:*:*:*:*:*:*:*
hp 7md72a_firmware < 2024-08-13 cpe:2.3:o:hp:7md72a_firmware:*:*:*:*:*:*:*:*
hp 7md72e_firmware < 2024-08-13 cpe:2.3:o:hp:7md72e_firmware:*:*:*:*:*:*:*:*
hp 7md73a_firmware < 2024-08-13 cpe:2.3:o:hp:7md73a_firmware:*:*:*:*:*:*:*:*
hp 7md74a_firmware < 2024-08-13 cpe:2.3:o:hp:7md74a_firmware:*:*:*:*:*:*:*:*
hp 7md74e_firmware < 2024-08-13 cpe:2.3:o:hp:7md74e_firmware:*:*:*:*:*:*:*:*
hp 7md75a_firmware < 2024-08-13 cpe:2.3:o:hp:7md75a_firmware:*:*:*:*:*:*:*:*
hp 7md76a_firmware < 2024-08-13 cpe:2.3:o:hp:7md76a_firmware:*:*:*:*:*:*:*:*
hp 7md76e_firmware < 2024-08-13 cpe:2.3:o:hp:7md76e_firmware:*:*:*:*:*:*:*:*

References for CVE-2024-9423

cvelogic Threat Intelligence