CVE-2024-28893

HIGH

HP SoftPaqs - Arbitrary Code Execution via Modified Configuration File

Title source: llm
STIX 2.1

Description

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

References (1)

Core 1

Scores

CVSS v3 7.7
EPSS 0.0035
EPSS Percentile 57.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-94
Status published
Products (1)
hp/softpaqs
Published May 01, 2024
Tracked Since Feb 18, 2026