Critical severity · published Dec 12, 2022
CVE-2021-3821
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs)
9.8
CVSS
1%
EPSS
No
On KEV
Description
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
F5
Futuresmart 5 · HP
before 5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-3821
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-3821
Vendor Advisory
https://support.hp.com/us-en/document/ish_4980799-4980823-16/hpsbpi03747
More from Futuresmart 5
9.8
CVE-2025-26508
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVE-2025-26507
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVE-2021-39238
Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow
7.5
CVE-2023-1707
Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled with FutureSmart version 5.6
6.5
CVE-2024-0407
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled…