2 lines
5.2 KiB
JSON
2 lines
5.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Poly CCX devices","vendor":"HP Inc.","versions":[{"status":"affected","version":"See HP Security Bulletin reference for affected versions."}]}],"source":"hp-security-alert@hp.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:poly_ccx_350:*:*:*:*:*:*:*:*","matchCriteriaId":"2D970E43-01C5-4235-B9ED-89F9692EE326","versionEndExcluding":"8.1.3.1301","versionStartIncluding":"8.0.2.3267","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:poly_ccx_350:-:*:*:*:*:*:*:*","matchCriteriaId":"B2E074BB-B5F4-4EA9-81E1-51AC4043BFB8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:poly_ccx_400:*:*:*:*:*:*:*:*","matchCriteriaId":"D8BF2E6F-45DF-494D-82FB-66B2C9DA98D3","versionEndExcluding":"8.1.3.1301","versionStartIncluding":"8.0.2.3267","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:poly_ccx_400:-:*:*:*:*:*:*:*","matchCriteriaId":"82BB1700-44DD-4A7B-97EE-4C90F1188C6E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:poly_ccx_500:*:*:*:*:*:*:*:*","matchCriteriaId":"9A037D5C-F533-4114-8730-32B05AB3983F","versionEndExcluding":"8.1.3.1301","versionStartIncluding":"8.0.2.3267","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:poly_ccx_500:-:*:*:*:*:*:*:*","matchCriteriaId":"F1A2B0F7-1F40-48FD-92D5-FF1BD6BDEF2D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:poly_ccx_505:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F89FC5-3031-422A-8BE9-CC785269F5F0","versionEndExcluding":"8.1.1301","versionStartIncluding":"8.0.2.3267","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:poly_ccx_505:-:*:*:*:*:*:*:*","matchCriteriaId":"71F5A4F9-0AD7-4405-80CC-FBB6FEBBC76B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:poly_ccx_600:*:*:*:*:*:*:*:*","matchCriteriaId":"555E3371-C4AC-4FDE-A384-503C24708D73","versionEndExcluding":"8.1.3.1301","versionStartIncluding":"8.0.2.3267","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:poly_ccx_600:-:*:*:*:*:*:*:*","matchCriteriaId":"47857C9A-0301-43D4-A04C-84CDB4DC7827","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:poly_ccx_700:*:*:*:*:*:*:*:*","matchCriteriaId":"13114B06-DC30-4466-828A-45ABF3DB9439","versionEndExcluding":"8.1.3.1301","versionStartIncluding":"8.0.2.3267","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:poly_ccx_700:-:*:*:*:*:*:*:*","matchCriteriaId":"F617E48A-6E3B-4ACB-A6D3-F28D69E53EFA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor."},{"lang":"es","value":"Se descubrió una vulnerabilidad en las versiones de firmware posteriores a 8.0.2.3267 y anteriores a 8.1.3.1301 en dispositivos CCX. Una falla en el proceso de creación del firmware no restringió adecuadamente el acceso a un recurso por parte de un actor no autorizado."}],"id":"CVE-2024-3281","lastModified":"2026-06-17T07:43:42.630","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.3,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-04-10T18:59:30.335810Z","version":"2.0.3"}}]},"published":"2024-04-09T16:15:08.510","references":[{"source":"hp-security-alert@hp.com","tags":["Vendor Advisory"],"url":"https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929"},{"source":"hp-security-alert@hp.com","tags":["Exploit","Third Party Advisory"],"url":"https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt"}],"sourceIdentifier":"hp-security-alert@hp.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|