PT-2025-1875 · Hewlett Packard · Hp

Published 2025-01-28 · Updated 2026-02-18 · CVE-2024-12511

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP (affected versions not specified)

Description With access to the address book, an attacker could modify SMB/FTP settings, redirect scans, and possibly capture credentials. This requires enabled scan functions and printer access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Missing Authentication

Insufficiently Protected Credentials

Weakness Enumeration

CWE-269

CWE-306

CWE-522

Related Identifiers

BDU:2025-02695

CVE-2024-12511

Affected Products

Hp

References · 38

• https://nvd.nist.gov/vuln/detail/CVE-2024-12511 · Security Note
• https://bdu.fstec.ru/vul/2025-02695 · Security Note
• https://twitter.com/tpx_Security/status/1892358511901765941 · Twitter Post
• https://twitter.com/IT_news_for_all/status/1891746582741008586 · Twitter Post
• https://t.me/cveNotify/135650 · Telegram Post
• https://twitter.com/transilienceai/status/1901684349353042282 · Twitter Post
• https://t.me/cybersecuritytechnologies/11832 · Telegram Post
• https://twitter.com/transilienceai/status/1901846601553129580 · Twitter Post
• https://twitter.com/CVEnew/status/1886499086930731064 · Twitter Post
• https://twitter.com/K3YPTlC/status/1891759492527739305 · Twitter Post
• https://twitter.com/achi_tech/status/1892912158624653533 · Twitter Post
• https://twitter.com/The_Cyber_News/status/1891487304667029689 · Twitter Post
• https://twitter.com/5MinuteBreach/status/1911894593345605780 · Twitter Post
• https://twitter.com/ksg93rd/status/1892244590339510394 · Twitter Post
• https://twitter.com/autumn_good_35/status/1891825014263120208 · Twitter Post