CVE-2024-28893

2024-05-0115:45:25

github.com

cve-2024-28893

software

arbitrary code execution

softpaqs

configuration file

modified

AI Score

7.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hp:softpaqs:-:*:*:*:*:*:*:*"
    ],
    "vendor": "hp",
    "product": "softpaqs",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  }
]