Medium severity · published Feb 21, 2024
CVE-2024-0407
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled…
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
F3
Futuresmart 3 · HP
before 2309110_002023; before 2309110_002029; before 2309110_002016; before 2309110_002022; before 2309110_002016; before 2309110_002028; +1 more · source: NVD
F4
Futuresmart 4 · HP
before 2411265_067635; before 2411265_067634; before 2411265_067627; before 2411265_067630; before 2411265_067628; before 2411265_067628; +1 more · source: NVD
F5
Futuresmart 5 · HP
before 2507252_046145; before 2507252_046159; before 2507252_046129; before 2507252_046112; before 2507252_046140; before 2507252_046117; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-0407
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-0407
Vendor Advisory
https://support.hp.com/us-en/document/ish_10174094-10174120-16
More from Futuresmart 3
9.8
CVE-2025-26508
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVE-2025-26507
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVE-2021-39238
Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow
9.8
CVE-2019-6334
HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code
6.1
CVE-2019-18914
A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on…