CVSS 3.1
8.8 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:HCVE-2024-3281
A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:poly_ccx_350
- hp:poly_ccx_400
- hp:poly_ccx_500
- hp:poly_ccx_505
- hp:poly_ccx_600
- hp:poly_ccx_700
References
- https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt
- https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt