Lucene search

HpCVE-2024-41913

HistoryAug 06, 2024 - 2:16 p.m.

CVE-2024-41913

2024-08-0614:16:04

CWE-434

web.nvd.nist.gov

firmware vulnerability

poly clariti manager

user input

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

20.0%

JSON

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input.

Affected configurations

Nvd

Node

hppoly_clariti_manager_firmwareRange≤10.10.2.2

AND

hppoly_clariti_managerMatch-

VendorProductVersionCPE
hppoly_clariti_manager_firmware*cpe:2.3:o:hp:poly_clariti_manager_firmware:*:*:*:*:*:*:*:*
hppoly_clariti_manager-cpe:2.3:h:hp:poly_clariti_manager:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	poly_clariti_manager_firmware	*	cpe:2.3:o:hp:poly_clariti_manager_firmware::::::::
hp	poly_clariti_manager	-	cpe:2.3:h:hp:poly_clariti_manager:-:::::::*

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "Poly Clariti Manager",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ]
  }
]

References

support.hp.com/us-en/document/ish_11006488-11006512-16/hpsbpy03957

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

20.0%

JSON

Related for CVE-2024-41913