CVE-2024-2301

Published: May 23, 2024Modified: Jun 17, 2026

7.6

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Exploitability: 2.3 / Impact: 4.7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device.

Affected (14)

Products: Hp: Cz181a Firmware, Cz182a Firmware, Cz187a Firmware, Cz183a Firmware, Cz172a Firmware, Cz173a Firmware, Cz176a Firmware, Cz177a Firmware, Cz178a Firmware, Cz174a Firmware, Cz175a Firmware, Cz184a Firmware, Cz185a Firmware, Cz186a Firmware

14 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz181a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz181a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz182a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz182a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz187a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz187a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz183a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz183a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz172a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz172a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz173a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz173a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz176a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz176a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz177a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz177a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz178a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz178a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz174a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz174a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz175a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz175a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz184a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz184a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz185a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz185a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz186a Firmware	Before 2023-03-30

Running on/with	Platform Versions
Hp Cz186a	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://support.hp.com/us-en/document/ish_10617756-10617781-16/hpsbpi03940

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/us-en/document/ish_10617756-10617781-16/hpsbpi03940

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.