medium6.3
CVE-2024-2209
A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (F…
Impact
A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | 26k70b Firmware | before 2349b before 2349c before 2349d |
| Hp | 297x1a Firmware | before 2349b before 2349c before 2349d |
| Hp | 2a9q5a Firmware | before 2349b before 2349c before 2349d |
| Hp | 26k72a Firmware | before 2349b before 2349c before 2349d |
| Hp | 26k69a Firmware | before 2349b before 2349c before 2349d |
| Hp | 26k70a Firmware | before 2349b before 2349c before 2349d |
| Hp | 26k71a Firmware | before 2349b before 2349c before 2349d |
| Hp | 26k68a Firmware | before 2349b before 2349c before 2349d |
| Hp | 26k67a Firmware | before 2349b before 2349c before 2349d |
| Hp | 3xv19a Firmware | before 2349b before 2349c before 2349d |
| Hp | 7fr52a Firmware | before 2349b before 2349c before 2349d |
| Hp | 7fr57a Firmware | before 2349b before 2349c before 2349d |