CVE-2024-3281

🗓️ 09 Apr 2024 15:27:11Reported by hpType

Vulnerability in CCX firmware build proces

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of microprogrammed software in telephones and audio conferencing systems, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.	22 Apr 202400:00	–	bdu_fstec
CNNVD	HP SoftPaq 安全漏洞	9 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-3281	9 Apr 202415:27	–	cvelist
EUVD	EUVD-2024-31871	3 Oct 202520:07	–	euvd
Hewlett-Packard	UC Software – Improper Access Control	4 Apr 202400:00	–	hp
NVD	CVE-2024-3281	9 Apr 202416:15	–	nvd
OSV	CVE-2024-3281	9 Apr 202416:15	–	osv
Positive Technologies	PT-2024-2967 · Poly · Poly Ccx	4 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3281	23 May 202510:10	–	redhatcve
Vulnrichment	CVE-2024-3281	9 Apr 202415:27	–	vulnrichment

NVD

Node

hp poly_ccx_350Range8.0.2.3267–8.1.3.1301

AND

hp poly_ccx_350Match-

Node

hp poly_ccx_400Range8.0.2.3267–8.1.3.1301

AND

hp poly_ccx_400Match-

Node

hp poly_ccx_500Range8.0.2.3267–8.1.3.1301

AND

hp poly_ccx_500Match-

Node

hp poly_ccx_505Range8.0.2.3267–8.1.1301

AND

hp poly_ccx_505Match-

Node

hp poly_ccx_600Range8.0.2.3267–8.1.3.1301

AND

hp poly_ccx_600Match-

Node

hp poly_ccx_700Range8.0.2.3267–8.1.3.1301

AND

hp poly_ccx_700Match-

[
  {
    "vendor": "HP Inc.",
    "product": "Poly CCX devices",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ]
  }
]

Source	Link
syss	www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt
support	www.support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929

17 Jun 2026 07:43Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.8

EPSS0.00501

SSVC

CWE-306