CVE-2024-28893

2024-05-0115:45:25

www.cve.org

software packages

softpaqs

arbitrary code execution

vulnerability

updated software

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "HP software packages (SoftPaqs)",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ]
  }
]

References

support.hp.com/us-en/document/ish_10502451-10502508-16/hpsbhf03931