Lucene search
HistoryJun 12, 2023 - 10:15 p.m.
CVE-2023-26298
hp device manager
vulnerability
command injection
privilege elevation
cve-2023-26298
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.5%
Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
Affected configurations
Node
hphp_device_managerMatch5.0-
ORhphp_device_managerMatch5.0sp1
ORhphp_device_managerMatch5.0sp2
ORhphp_device_managerMatch5.0.3
ORhphp_device_managerMatch5.0.4
ORhphp_device_managerMatch5.0.5
ORhphp_device_managerMatch5.0.6
ORhphp_device_managerMatch5.0.7
ORhphp_device_managerMatch5.0.7.1
ORhphp_device_managerMatch5.0.8
ORhphp_device_managerMatch5.0.9
Related
cve
cve
CVE-2023-26298
2023-06-12 22:15:09
cvelist
cvelist
CVE-2023-26298
2023-06-12 21:20:38
prion
prion
Command injection
2023-06-12 22:15:00
hp
hp
HP Device Manager Security Updates
2023-04-13 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.5%
Related for NVD:CVE-2023-26298