by Kastro
Paper/Archive/CVE-2024-0794

CVE-2024-0794

HP Inc. Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers — Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Buffer Overflow, Potential Remote Code Execution

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 71.3.713 × 2014.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Certain HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to Remote Code Execution due to buffer overflow when rendering fonts embedded in a PDF file.

Affected

ProductAffectedFixed inSource
Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed PrintersSee HP Security Bulletin reference for affected versions.–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hp.com/us-en/document/ish_10174031-10174074-16refsupport.hp.com/us-en/document/ish_10174031-10198670-16