F9A29A Firmware
CVE-2024-5749
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (hp) · only source for this CVE.
CVSS VectorVendor: hp
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials.
AnalysisAI
Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Missing Authentication for Critical Function (CWE-306), which allows attackers to access critical functionality without authentication. Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. Affected products include: Hp F9A29A Firmware, Hp F9A29B Firmware, Hp F9A29C Firmware, Hp F9A29D Firmware, Hp F9A29E Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Require authentication for all sensitive operations, implement defense in depth.
More in F9A29A Firmware
View allA security vulnerability has been identified with certain HP Inkjet printers. Rated high severity (CVSS 7.8), this vulne
A security vulnerability has been identified with certain HP Inkjet printers. Rated critical severity (CVSS 9.8), this v
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today