Lucene search

HpCVE-2024-5760

HistorySep 11, 2024 - 4:15 p.m.

CVE-2024-5760

2024-09-1116:15:08

CWE-269

web.nvd.nist.gov

samsung

universal print driver

windows

vulnerability

escalation of privilege

reverse shell

2018.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

9.6%

JSON

The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018.

Affected configurations

Nvd

Node

samsunguniversal_print_driverMatch3.00.16.0101

AND

microsoftwindowsMatch-

VendorProductVersionCPE
samsunguniversal_print_driver3.00.16.0101cpe:2.3:a:samsung:universal_print_driver:3.00.16.0101:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	universal_print_driver	3.00.16.0101	cpe:2.3:a:samsung:universal_print_driver:3.00.16.0101:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "Samsung Universal Print Driver",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "3.00.16.0101",
        "status": "affected"
      }
    ]
  }
]

References

support.hp.com/us-en/document/ish_11159589-11159645-16/hpsbpi03970

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-5760