CVE-2024-2209

Published: Mar 27, 2024Modified: Jun 17, 2026

6.3

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Exploitability: 0.8 / Impact: 5.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.

Affected (83)

Products: Hp: 26k70b Firmware, 297x1a Firmware, 2a9q5a Firmware, 26k72a Firmware, 26k69a Firmware, 26k70a Firmware, 26k71a Firmware, 26k68a Firmware, 26k67a Firmware, 3xv19a Firmware, 7fr52a Firmware, 7fr57a Firmware, 7fr53a Firmware, 7fr58a Firmware, 7fr61a Firmware, 5ar83a Firmware, 5ar84a Firmware, 5ar85a Firmware, 8rk11a Firmware, 3xv17a Firmware, 4ws04a Firmware, 7fr21a Firmware, 7fr20a Firmware, 26k72b Firmware, 26k67b Firmware, 297w8a Firmware, 26k68b Firmware, 297x0a Firmware

28 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k70b Firmware	Before 2349b

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Hp 297x1a Firmware	Before 2349b

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Hp 2a9q5a Firmware	Before 2349b

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k72a Firmware	Before 2349b

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k69a Firmware	Before 2349b

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k70a Firmware	Before 2349b

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k71a Firmware	Before 2349b

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k68a Firmware	Before 2349b

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k67a Firmware	Before 2349b

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Hp 3xv19a Firmware	Before 2349b

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr52a Firmware	Before 2349b

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr57a Firmware	Before 2349b

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr53a Firmware	Before 2349b

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr58a Firmware	Before 2349b

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr61a Firmware	Before 2349b

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Hp 5ar83a Firmware	Before 2349b

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Hp 5ar84a Firmware	Before 2349b

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Hp 5ar85a Firmware	Before 2349b

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Hp 8rk11a Firmware	Before 2349b

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Hp 3xv17a Firmware	Before 2349b

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Hp 4ws04a Firmware	Before 2349b

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr21a Firmware	Before 2349b

Configuration W

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr20a Firmware	Before 2349b

Configuration X

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k72b Firmware	Before 2349c

Configuration Y

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k67b Firmware	Before 2349c

Configuration Z

1 vulnerable

Vulnerable Software	Affected Versions
Hp 297w8a Firmware	Before 2349c

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k68b Firmware	Before 2349c

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Hp 297x0a Firmware	Before 2349c

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k70b Firmware	Before 2349c

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Hp 297x1a Firmware	Before 2349c

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Hp 2a9q5a Firmware	Before 2349c

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k72a Firmware	Before 2349c

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k69a Firmware	Before 2349c

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k70a Firmware	Before 2349c

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k71a Firmware	Before 2349c

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k68a Firmware	Before 2349c

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k67a Firmware	Before 2349c

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Hp 3xv19a Firmware	Before 2349c

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr52a Firmware	Before 2349c

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr57a Firmware	Before 2349c

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k72b Firmware	Before 2349b

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k67b Firmware	Before 2349b

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Hp 297w8a Firmware	Before 2349b

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Hp 26k68b Firmware	Before 2349b

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Hp 297x0a Firmware	Before 2349b

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr53a Firmware	Before 2349c

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr58a Firmware	Before 2349c

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr61a Firmware	Before 2349c

Configuration W

1 vulnerable

Vulnerable Software	Affected Versions
Hp 5ar83a Firmware	Before 2349c

Configuration X

1 vulnerable

Vulnerable Software	Affected Versions
Hp 5ar84a Firmware	Before 2349c

Configuration Y

1 vulnerable

Vulnerable Software	Affected Versions
Hp 5ar85a Firmware	Before 2349c

Configuration Z

1 vulnerable

Vulnerable Software	Affected Versions
Hp 8rk11a Firmware	Before 2349c

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hp 3xv17a Firmware	Before 2349c

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Hp 4ws04a Firmware	Before 2349c

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Hp 7fr21a Firmware	Before 2349c

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 7fr20a Firmware	Before 2349c

Running on/with	Platform Versions
Hp 7fr20a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 7fr21a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 7fr21a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k72b Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k72b	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k67b Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k67b	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 297w8a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 297w8a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k68b Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k68b	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 297x0a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 297x0a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k70b Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k70b	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 297x1a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 297x1a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 2a9q5a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 2a9q5a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k72a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k72a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k69a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k69a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k70a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k70a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k71a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k71a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k68a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k68a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 26k67a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 26k67a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 3xv19a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 3xv19a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 7fr52a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 7fr52a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 7fr57a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 7fr57a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 7fr53a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 7fr53a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 7fr58a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 7fr58a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 7fr61a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 7fr61a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 5ar83a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 5ar83a	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 5ar84a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 5ar84a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 5ar85a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 5ar85a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 8rk11a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 8rk11a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 3xv17a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 3xv17a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 4ws04a Firmware	Before 2349d

Running on/with	Platform Versions
Hp 4ws04a	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (2)

https://support.hp.com/us-en/document/ish_10354903-10354932-16

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/us-en/document/ish_10354903-10354932-16

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.