Vulnerability Details CVE-2024-5143
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.3%
CVSS Severity
CVSS v3 Score 6.8
References
Products affected by CVE-2024-5143
-
cpe:2.3:h:hp:w1a75a:-
-
cpe:2.3:h:hp:w1a76a:-
-
cpe:2.3:h:hp:w1a77a:-
-
cpe:2.3:h:hp:w1a78a:-
-
cpe:2.3:h:hp:w1a79a:-
-
cpe:2.3:h:hp:w1a80a:-
-
cpe:2.3:h:hp:w1a81a:-
-
cpe:2.3:h:hp:w1a82a:-
-
cpe:2.3:o:hp:w1a75a_firmware:*
-
cpe:2.3:o:hp:w1a76a_firmware:*
-
cpe:2.3:o:hp:w1a77a_firmware:*
-
cpe:2.3:o:hp:w1a78a_firmware:*
-
cpe:2.3:o:hp:w1a79a_firmware:*
-
cpe:2.3:o:hp:w1a80a_firmware:*
-
cpe:2.3:o:hp:w1a81a_firmware:*
-
cpe:2.3:o:hp:w1a82a_firmware:*