CVEvulnerability

CVE-2024-2209

6.3 MEDIUM Published 2024-03-27 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-94

Description

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.

Affected configurations

• hp 26k70b firmware (< 2349b) • hp 297x1a firmware (< 2349b) • hp 2a9q5a firmware (< 2349b) • hp 26k72a firmware (< 2349b) • hp 26k69a firmware (< 2349b) • hp 26k70a firmware (< 2349b) • hp 26k71a firmware (< 2349b) • hp 26k68a firmware (< 2349b) • hp 26k67a firmware (< 2349b) • hp 3xv19a firmware (< 2349b) • hp 7fr52a firmware (< 2349b) • hp 7fr57a firmware (< 2349b) • hp 7fr53a firmware (< 2349b) • hp 7fr58a firmware (< 2349b) • hp 7fr61a firmware (< 2349b) • hp 5ar83a firmware (< 2349b) • hp 5ar84a firmware (< 2349b) • hp 5ar85a firmware (< 2349b) • hp 8rk11a firmware (< 2349b) • hp 3xv17a firmware (< 2349b) • hp 4ws04a firmware (< 2349b) • hp 7fr21a firmware (< 2349b) • hp 7fr20a firmware (< 2349b) • hp 26k72b firmware (< 2349c) • hp 26k67b firmware (< 2349c) • hp 297w8a firmware (< 2349c) • hp 26k68b firmware (< 2349c) • hp 297x0a firmware (< 2349c) • hp 26k70b firmware (< 2349c) • hp 297x1a firmware (< 2349c) • hp 2a9q5a firmware (< 2349c) • hp 26k72a firmware (< 2349c) • hp 26k69a firmware (< 2349c) • hp 26k70a firmware (< 2349c) • hp 26k71a firmware (< 2349c) • hp 26k68a firmware (< 2349c) • hp 26k67a firmware (< 2349c) • hp 3xv19a firmware (< 2349c) • hp 7fr52a firmware (< 2349c) • hp 7fr57a firmware (< 2349c) • hp 26k72b firmware (< 2349b) • hp 26k67b firmware (< 2349b) • hp 297w8a firmware (< 2349b) • hp 26k68b firmware (< 2349b) • hp 297x0a firmware (< 2349b) • hp 7fr53a firmware (< 2349c) • hp 7fr58a firmware (< 2349c) • hp 7fr61a firmware (< 2349c) • hp 5ar83a firmware (< 2349c) • hp 5ar84a firmware (< 2349c) • hp 5ar85a firmware (< 2349c) • hp 8rk11a firmware (< 2349c) • hp 3xv17a firmware (< 2349c) • hp 4ws04a firmware (< 2349c) • hp 7fr21a firmware (< 2349c) • hp 7fr20a firmware (< 2349c) • hp 7fr21a firmware (< 2349d) • hp 26k72b firmware (< 2349d) • hp 26k67b firmware (< 2349d) • hp 297w8a firmware (< 2349d) … and 23 more

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References