CVE-2024-5143: Medium severity HP W1a75a Firmware vulnerability
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5143?
CVE-2024-5143 is considered a high-severity vulnerability due to the potential exposure of SMTP server credentials.
How do I fix CVE-2024-5143?
To fix CVE-2024-5143, ensure that device administrative privileges are restricted and upgrade to the latest firmware version provided by HP.
Who is affected by CVE-2024-5143?
CVE-2024-5143 affects users of specific HP device firmware versions below 002_2413A.
What does CVE-2024-5143 allow a user to do?
CVE-2024-5143 allows a user with device administrative privileges to modify SMTP server settings without re-entering credentials.
How can CVE-2024-5143 impact email communication?
CVE-2024-5143 can redirect email traffic, potentially exposing sensitive SMTP server credentials to unauthorized users.