« Volver al listado

CVE-2024-1869

Estado: AnalizadaAlta (7.5)—

Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpose gateway (GGW) over port 9220.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

HP — Cq891c FirmwareHP — Cq893c Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-1869",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-1869",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-23T15:01:53.797581Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "HP Inc.",
          "product": "HP DesignJet",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:h:hp:designjet_t520_24in:*:*:*:*:*:*:*:*"
          ],
          "vendor": "hp",
          "product": "designjet_t520_24in",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "axp2cn2331ar",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:h:hp:designjet_t120:*:*:*:*:*:*:*:*"
          ],
          "vendor": "hp",
          "product": "designjet_t120",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "axp2cn2331ar",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:h:hp:designjet_t520_36in:*:*:*:*:*:*:*:*"
          ],
          "vendor": "hp",
          "product": "designjet_t520_36in",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "axp2cn2331ar",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-03-01T22:15:47.777",
  "references": [
    {
      "url": "https://support.hp.com/us-en/document/ish_10235960-10236033-16/hpsbpi03920",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://support.hp.com/us-en/document/ish_10235960-10236033-16/hpsbpi03920",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpose gateway (GGW) over port 9220."
    },
    {
      "lang": "es",
      "value": "Ciertos productos de impresión HP DesignJet son potencialmente vulnerables a la divulgación de información relacionada con el acceso a la memoria fuera de los límites cuando se utiliza la puerta de enlace de uso general (GGW) a través del puerto 9220."
    }
  ],
  "lastModified": "2026-06-17T07:05:10.887",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:cq893c_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "578E8817-43B3-49A9-96AC-3A8EA40709EC",
              "versionEndExcluding": "axp2cn2331ar"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:cq893c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "599F7610-F142-49F7-9682-38359FE1FEC1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:cq891c_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76E4201D-04B2-47A3-A0C8-7FA0AE699F23",
              "versionEndExcluding": "AXP2CN2331AR"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:cq891c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "50DB17E6-00C6-448E-9501-BDC78822CC08"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:cq893c_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "578E8817-43B3-49A9-96AC-3A8EA40709EC",
              "versionEndExcluding": "axp2cn2331ar"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:cq893c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "599F7610-F142-49F7-9682-38359FE1FEC1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}