A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices
Published Apr 9, 2024
8.8
HIGHCVSS 3.1
EPSS 0.50%
Description
A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor.
Affected products
-
Affected
- See HP Security Bulletin reference for affected versions.
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| HP Inc. | Poly CCX devices | unknown | Affected
|
Configuration 1
- ≥ 8.0.2.3267 · < 8.1.3.1301
Running on/with
- n/a
Configuration 2
- ≥ 8.0.2.3267 · < 8.1.3.1301
Running on/with
- n/a
Configuration 3
- ≥ 8.0.2.3267 · < 8.1.3.1301
Running on/with
- n/a
Configuration 4
- ≥ 8.0.2.3267 · < 8.1.1301
Running on/with
- n/a
Configuration 5
- ≥ 8.0.2.3267 · < 8.1.3.1301
Running on/with
- n/a
Configuration 6
- ≥ 8.0.2.3267 · < 8.1.3.1301
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-31871 Advisory
- https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929 Vendor Advisory
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt ExploitThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-31871 | Advisory | |
| https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929 | Vendor Advisory | |
| https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt | ExploitThird Party Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data