MEDIUM · 6.5

CVE-2024-0407

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions ma...

Vulnerability Description

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
HpFuturesmart 4< 2411265_067635
HpA2W75A-
HpA2W76A-
HpD7P70A-
HpD7P71A-
HpL3U51A-
HpL3U52A-
HpA2W77A-
HpA2W78A-
HpA2W79A-
HpD7P72A-
HpD7P73A-
HpCf066A-
HpCf067A-
HpCf068A-
HpCf069A-
HpL3U63A-
HpL3U64A-
HpCf367A-
HpL3U65A-

References

FAQ

What is CVE-2024-0407?

CVE-2024-0407 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions ma...

How severe is CVE-2024-0407?

CVE-2024-0407 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-0407?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Futuresmart 4, Hp A2W75A, Hp A2W76A, Hp D7P70A, Hp D7P71A.