CVEvulnerability

CVE-2024-3498

7.8 HIGH Published 2024-06-14 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-06-14
Last modified
2026-06-17
Assigner
ecc0f906-8666-484c-bcf8-c3b7520a72f0
CVSS 3.1 (ecc0f906-8666-484c-bcf8-c3b7520a72f0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-250

Description

Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root. As for the affected products/models/versions, see the reference URL.

Related

Weakness · CWE (1)

  • CWE-250 Execution with Unnecessary Privileges weakness

References