Command Injection and Privilege Escalation in HP Device Manager by HP

CVE-2023-26294

What is CVE-2023-26294?

HP Device Manager, versions prior to 5.0.10, are susceptible to vulnerabilities that could allow attackers to perform command injection and gain elevated privileges. This could enable unauthorized access and potentially harmful actions within user environments. It is crucial for organizations utilizing HP Device Manager to upgrade to the latest version to mitigate these risks and safeguard their systems.

References