Medium severity · published Feb 20, 2024
CVE-2024-0407
Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Information Disclosure
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Certain HP Enterprise LaserJet, HP LaserJet Managed Printers · HP Inc.
See HP security bulletin reference for affected versions · source: vendor
F3
Futuresmart 3 · HP
before 2309110_002023; before 2309110_002029; before 2309110_002016; before 2309110_002022; before 2309110_002016; before 2309110_002028; +1 more · source: NVD
F4
Futuresmart 4 · HP
before 2411265_067635; before 2411265_067634; before 2411265_067627; before 2411265_067630; before 2411265_067628; before 2411265_067628; +1 more · source: NVD
F5
Futuresmart 5 · HP
before 2507252_046145; before 2507252_046159; before 2507252_046129; before 2507252_046112; before 2507252_046140; before 2507252_046117; +34 more · source: NVD
Affected product
CH
Certain HP Enterprise LaserJet, HP LaserJet Managed Printers
HP Inc.