CVE-2024-0407

MEDIUM

HP Enterprise LaserJet/Managed Printers - Info Disclosure

Title source: llm

Description

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store.

References (1)

Core 1

Core References

Various Sources

https://support.hp.com/us-en/document/ish_10174094-10174120-16

Scores

CVSS v3 6.5

EPSS 0.0029

EPSS Percentile 52.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (4)

hp/futuresmart_3 < 2309110_002023

hp/futuresmart_4

hp/futuresmart_4 < 2411265_067635

hp/futuresmart_5 < 2507252_046165

Published Feb 21, 2024

Tracked Since Feb 18, 2026