PT-2024-2665 · Microsoft+1 · Windows+1

Published 2024-03-26 · Updated 2024-08-06 · CVE-2024-2209

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Printer's Firmware Update Utility (FUU) bundle (affected versions not specified)

Description The issue is related to an uncontrolled search path element in the HP printer's Firmware Update Utility (FUU) bundle. A user with administrative privileges can create a compromised dll file of the same name as the original dll and place it in the Microsoft Windows default downloads directory, potentially leading to arbitrary code execution.

Recommendations As a temporary workaround, consider restricting access to the FUU bundle until a patch is available. Avoid using the default downloads directory for storing dll files from the FUU bundle. Restrict administrative privileges to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Uncontrolled Search Path Element

Weakness Enumeration

CWE-94

CWE-427

Related Identifiers

BDU:2024-02739

CVE-2024-2209

Affected Products

Hp Printer'S Firmware Update Utility (Fuu) Bundle

Windows

References · 8

• https://support.hp.com/us-en/document/ish_10354903-10354932-16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2209 · Security Note
• https://bdu.fstec.ru/vul/2024-02739 · Security Note
• https://osv.dev/vulnerability/CVE-2024-2209 · Vendor Advisory
• https://twitter.com/CVEnew/status/1772791191609934010 · Twitter Post
• https://support.hp.com/us-en/document/ish_10354903-10354932-16/hpsbpi03928 · Note
• https://t.me/cvenotify/89499 · Telegram Post
• https://t.me/cvenotify/74741 · Telegram Post