VULNERABILITY INTELLIGENCE

CVE-2024-2209

CVSS score6.3 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2024-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Description

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-94

Primary references