First published: Mon Jun 12 2023(Updated: )
Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
Credit: hp-security-alert@hp.com hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
Hp Hp Device Manager | =5.0 | |
Hp Hp Device Manager | =5.0-sp1 | |
Hp Hp Device Manager | =5.0-sp2 | |
Hp Hp Device Manager | =5.0.3 | |
Hp Hp Device Manager | =5.0.4 | |
Hp Hp Device Manager | =5.0.5 | |
Hp Hp Device Manager | =5.0.6 | |
Hp Hp Device Manager | =5.0.7 | |
Hp Hp Device Manager | =5.0.7.1 | |
Hp Hp Device Manager | =5.0.8 | |
Hp Hp Device Manager | =5.0.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-26296 has a high severity due to its potential for command injection and privilege escalation.
To mitigate CVE-2023-26296, upgrade to HP Device Manager version 5.0.10 or later.
CVE-2023-26296 affects all versions of HP Device Manager prior to 5.0.10.
The impact of CVE-2023-26296 includes potential unauthorized command execution and elevation of user privileges.
As of now, there are no public reports confirming active exploitation of CVE-2023-26296.