VULNERABILITY INTELLIGENCE

CVE-2024-28893

CVSS score7.7 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-05-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references