126 lines
4.9 KiB
JSON
126 lines
4.9 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.1",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2024-1695",
|
|
"assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "hp",
|
|
"dateReserved": "2024-02-20T23:12:57.661Z",
|
|
"datePublished": "2024-05-06T20:47:35.746Z",
|
|
"dateUpdated": "2025-03-13T13:56:03.944Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A potential security vulnerability has been identified in the HP Application Enabling Software Driver for certain HP PC products, which might allow escalation of privilege. HP is releasing software updates to mitigate this potential vulnerability."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"vendor": "HP Inc.",
|
|
"product": "HP Application Enabling Software Driver",
|
|
"defaultStatus": "unknown",
|
|
"versions": [
|
|
{
|
|
"version": "See HP Security Bulletin reference for affected versions.",
|
|
"status": "affected"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://support.hp.com/us-en/document/ish_10555591-10555627-16/hpsbhf03932"
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
|
|
"shortName": "hp",
|
|
"dateUpdated": "2024-05-06T20:47:35.746Z"
|
|
},
|
|
"x_generator": {
|
|
"engine": "cveClient/1.0.15"
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"providerMetadata": {
|
|
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"shortName": "CVE",
|
|
"dateUpdated": "2024-08-01T18:48:21.737Z"
|
|
},
|
|
"title": "CVE Program Container",
|
|
"references": [
|
|
{
|
|
"url": "https://support.hp.com/us-en/document/ish_10555591-10555627-16/hpsbhf03932",
|
|
"tags": [
|
|
"x_transferred"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"type": "CWE",
|
|
"lang": "en",
|
|
"description": "CWE-noinfo Not enough information"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"metrics": [
|
|
{
|
|
"cvssV3_1": {
|
|
"scope": "UNCHANGED",
|
|
"version": "3.1",
|
|
"baseScore": 5.7,
|
|
"attackVector": "LOCAL",
|
|
"baseSeverity": "MEDIUM",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
|
|
"integrityImpact": "HIGH",
|
|
"userInteraction": "NONE",
|
|
"attackComplexity": "HIGH",
|
|
"availabilityImpact": "HIGH",
|
|
"privilegesRequired": "HIGH",
|
|
"confidentialityImpact": "NONE"
|
|
}
|
|
},
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"timestamp": "2024-12-04T16:05:03.092558Z",
|
|
"id": "CVE-2024-1695",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "total"
|
|
}
|
|
],
|
|
"role": "CISA Coordinator",
|
|
"version": "2.0.3"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2025-03-13T13:56:03.944Z"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |