PT-2024-7454 · Hewlett Packard · Hp Designjet

Published 2024-06-07 · Updated 2026-02-24 · CVE-2024-5749

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: HP DesignJet products (affected versions not specified)

Description: The issue is related to a credential reflection vulnerability in the SMTP Server Credential Handler component of HP DesignJet products' firmware. This vulnerability is associated with a lack of authentication for a critical function. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information, specifically by viewing SMTP server credentials.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2024-08833

CVE-2024-5749

Affected Products

Hp Designjet

References · 10

• https://osv.dev/vulnerability/CVE-2024-5749 · Vendor Advisory
• https://support.hp.com/us-en/document/ish_11428772-11428805-16/hpsbpi03979 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5749 · Security Note
• https://bdu.fstec.ru/vul/2024-08833 · Security Note
• https://vulners.com/nvd/NVD:CVE-2024-5749 · Note
• https://twitter.com/CVEnew/status/1846247570185900183 · Twitter Post
• https://t.me/cveNotify/153004 · Telegram Post
• https://vuldb.com/?id.280425 · Note
• https://twitter.com/VulmonFeeds/status/1846319412774633948 · Twitter Post
• https://t.me/cvedetector/7939 · Telegram Post