Lucene search

HpCVE-2024-41912

HistoryAug 07, 2024 - 8:15 p.m.

CVE-2024-41912

2024-08-0720:15:50

web.nvd.nist.gov

vulnerability

poly clariti manager

firmware flaw

access controls

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

39.7%

JSON

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls.

Affected configurations

Nvd

Node

hppoly_clariti_manager_firmwareRange<10.10.2.2_100

AND

hppoly_clariti_manager

VendorProductVersionCPE
hppoly_clariti_manager_firmware*cpe:2.3:o:hp:poly_clariti_manager_firmware:*:*:*:*:*:*:*:*
hppoly_clariti_manager*cpe:2.3:h:hp:poly_clariti_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	poly_clariti_manager_firmware	*	cpe:2.3:o:hp:poly_clariti_manager_firmware::::::::
hp	poly_clariti_manager	*	cpe:2.3:h:hp:poly_clariti_manager::::::::

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "Poly Clariti Manager",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ]
  }
]

References

support.hp.com/us-en/document/ish_11006235-11006266-16/hpsbpy03958

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

39.7%

JSON

Related for CVE-2024-41912