2 lines
5.6 KiB
JSON
2 lines
5.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"Certain HP LaserJet Pro Printers ","vendor":"HP Inc.","versions":[{"status":"affected","version":"See HP Security Bulletin reference for affected versions."}]}],"source":"hp-security-alert@hp.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a78a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1DF8738F-A97F-4C6B-9F66-9ABAE062286A","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a78a:-:*:*:*:*:*:*:*","matchCriteriaId":"A103FF3D-FB16-463F-9913-49EEDCDB9348","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a80a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"09F39E93-BBE3-4BAC-9016-95D4BE41880A","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a80a:-:*:*:*:*:*:*:*","matchCriteriaId":"E611AC6F-F279-427F-8213-1B3A1F0EB63B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a79a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B33F043A-48FE-4BBE-89F0-5165E6984739","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a79a:-:*:*:*:*:*:*:*","matchCriteriaId":"81B33E5A-E22E-4DCF-9B8E-F0650CBF6309","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a82a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F19D28D7-0E4A-4789-B1F5-814FFCB928CC","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a82a:-:*:*:*:*:*:*:*","matchCriteriaId":"0E35167E-1A40-4A62-931B-6AF8F49C2214","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a81a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B27C3D9B-1370-4A0B-96BF-8D90974752A7","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a81a:-:*:*:*:*:*:*:*","matchCriteriaId":"DF8D6946-CE0F-45AE-BBA9-5983F860FEDD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a77a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F1645A2E-9718-4A11-ACB1-B6BFCB0BF3AA","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a77a:-:*:*:*:*:*:*:*","matchCriteriaId":"76B034FA-D338-40CD-917E-7B8177715FCB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a76a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2D9E9E0E-A181-4733-BDD1-3F0B2A7A31AF","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a76a:-:*:*:*:*:*:*:*","matchCriteriaId":"C84C74A6-597E-4E0A-93AC-94EF3073321E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hp:w1a75a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5D159DAD-72AD-4F21-AF57-F83B213C169A","versionEndExcluding":"002_2413A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hp:w1a75a:-:*:*:*:*:*:*:*","matchCriteriaId":"3FBE9436-340F-4428-91CB-4F53764AC184","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed."},{"lang":"es","value":"Un usuario con privilegios administrativos del dispositivo puede cambiar la configuración del servidor SMTP existente en el dispositivo, sin tener que volver a ingresar las credenciales del servidor SMTP. Al redirigir el tráfico de envío a correo electrónico al nuevo servidor, es posible que las credenciales originales del servidor SMTP queden expuestas."}],"id":"CVE-2024-5143","lastModified":"2026-06-17T08:15:17.073","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":4.0,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-5143","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-05-23T20:15:07.974891Z","version":"2.0.3"}}]},"published":"2024-05-23T17:15:31.560","references":[{"source":"hp-security-alert@hp.com","tags":["Vendor Advisory"],"url":"https://support.hp.com/us-en/document/ish_10643804-10643841-16/HPSBPI03941"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.hp.com/us-en/document/ish_10643804-10643841-16/HPSBPI03941"}],"sourceIdentifier":"hp-security-alert@hp.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|