The vulnerability in HP ENVY 5000 series printers running firmware VERBASPP1N003.2237A.00 involves improper management of concurrent TCP connections to port 9100, which is used for JetDirect/RAW printing. An unauthenticated remote attacker on the same network can exploit this by establishing persistent connections and sending keep-alive packets, causing the printer's session threads to remain locked in a waiting state. The firmware does not implement connection timeouts or limits on concurrent sessions, enabling a persistent Denial of Service condition that renders the printer unresponsive until manually restarted.

The vulnerability allows an unauthenticated attacker on the same network to cause a persistent Denial of Service on affected HP ENVY 5000 series printers. The printer becomes unresponsive to all user commands and print jobs, requiring physical manual restart to restore functionality. The attack can be immediately re-initiated after recovery, potentially causing repeated disruption of printing services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, physical restart is required to recover from the DoS condition. Network segmentation or restricting access to port 9100 to trusted devices may reduce exposure but are not confirmed mitigations in the advisory.