CVE-2024-2209

HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code

Medium · published March 26, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Published
2024-03-26T23:49Z
EPSS history
Timeline
  • 26 MAR 23:49Z
    HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code
    cvelistv5