CVE-2024-28893

CVSS 7.7 HIGHEPSS 0.3%CWE-94

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Affected products

HP Inc. · HP software packages (SoftPaqs)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.hp.com/us-en/document/ish_10502451-10502508-16/hpsbhf03931