CVE-2024-3281

2024-04-0916:15:08

[email protected]

web.nvd.nist.gov

firmware

vulnerability

ccx

build process

unauthorized access

resource

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor.

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "Poly CCX devices",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ]
  }
]