HIGH · 7.5

CVE-2024-5749

Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials.

Vulnerability Description

Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HpF9A29A Firmware< 001.2419b
HpF9A29A-
HpF9A29B Firmware< 001.2419b
HpF9A29B-
HpF9A29C Firmware< 001.2419b
HpF9A29C-
HpF9A29D Firmware< 001.2419b
HpF9A29D-
HpF9A29E Firmware< 001.2419b
HpF9A29E-
HpF9A29G Firmware< 001.2419b
HpF9A29G-
HpT5D66A Firmware< 001.2419b
HpT5D66A-
HpF9A30A Firmware< 001.2419b
HpF9A30A-
HpF9A30B Firmware< 001.2419b
HpF9A30B-
HpF9A30C Firmware< 001.2419b
HpF9A30C-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-5749?

CVE-2024-5749 is a vulnerability with a CVSS score of 7.5 (HIGH). Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials.

How severe is CVE-2024-5749?

CVE-2024-5749 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-5749?

Check the references section above for vendor advisories and patch information. Affected products include: Hp F9A29A Firmware, Hp F9A29A, Hp F9A29B Firmware, Hp F9A29B, Hp F9A29C Firmware.