CVE-2024-5143

Description

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.

Reserved 2024-05-20 | Published 2024-05-23 | Updated 2024-10-31 | Assigner hp

Product status

See HP Security Bulletin reference for affected versions.
affected

References

support.hp.com/...ument/ish_10643804-10643841-16/HPSBPI03941

cve.org (CVE-2024-5143)

nvd.nist.gov (CVE-2024-5143)

Download JSON