First published: Mon Jun 12 2023(Updated: )
Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
Credit: hp-security-alert@hp.com hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
Hp Hp Device Manager | =5.0 | |
Hp Hp Device Manager | =5.0-sp1 | |
Hp Hp Device Manager | =5.0-sp2 | |
Hp Hp Device Manager | =5.0.3 | |
Hp Hp Device Manager | =5.0.4 | |
Hp Hp Device Manager | =5.0.5 | |
Hp Hp Device Manager | =5.0.6 | |
Hp Hp Device Manager | =5.0.7 | |
Hp Hp Device Manager | =5.0.7.1 | |
Hp Hp Device Manager | =5.0.8 | |
Hp Hp Device Manager | =5.0.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-26295 has a medium severity level due to the potential for command injection and privilege escalation.
To fix CVE-2023-26295, upgrade HP Device Manager to version 5.0.10 or later.
CVE-2023-26295 affects all versions of HP Device Manager prior to 5.0.10.
CVE-2023-26295 is a vulnerability that allows for command injection and elevation of privileges in HP Device Manager.
Yes, CVE-2023-26295 can potentially be exploited remotely if the vulnerable software is exposed.