Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-26294 Details

Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.hp.com/us-en/document/ish_7974907-7974931-16/hpsbhf03842	CVE	Vendor Advisory
https://support.hp.com/us-en/document/ish_7974907-7974931-16/hpsbhf03842	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-77	Improper Neutralization of Special Elements used in a Command ('Command Injection')	[email protected]
CWE-77	Improper Neutralization of Special Elements used in a Command ('Command Injection')	CISA-ADP

Product	Versions
hp hp device manager	5.0 - 5.0 sp1 5.0 sp2 5.0.3 5.0.4
CPE cpe:2.3:a:hp:hp_device_manager:5.0:-:::::: cpe:2.3:a:hp:hp_device_manager:5.0:sp1:::::: cpe:2.3:a:hp:hp_device_manager:5.0:sp2:::::: cpe:2.3:a:hp:hp_device_manager:5.0.3:::::::* cpe:2.3:a:hp:hp_device_manager:5.0.4:::::::* cpe:2.3:a:hp:hp_device_manager:5.0.5:::::::* cpe:2.3:a:hp:hp_device_manager:5.0.6:::::::* cpe:2.3:a:hp:hp_device_manager:5.0.7:::::::* cpe:2.3:a:hp:hp_device_manager:5.0.7.1:::::::* cpe:2.3:a:hp:hp_device_manager:5.0.8:::::::* cpe:2.3:a:hp:hp_device_manager:5.0.9:::::::* Remediation No remediation found in references.

Product

Versions

hp hp device manager

5.0 -

5.0 sp1

5.0 sp2

5.0.3

5.0.4

6 change records found show changes

QUICK INFO