medium6.8
CVE-2024-5143
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials.
Impact
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | W1a78a Firmware | before 002_2413A |
| Hp | W1a80a Firmware | before 002_2413A |
| Hp | W1a79a Firmware | before 002_2413A |
| Hp | W1a82a Firmware | before 002_2413A |
| Hp | W1a81a Firmware | before 002_2413A |
| Hp | W1a77a Firmware | before 002_2413A |
| Hp | W1a76a Firmware | before 002_2413A |
| Hp | W1a75a Firmware | before 002_2413A |