Firmware Vulnerability Affects CCX Devices
CVE-2024-3281

8.8HIGH

Key Information:

Vendor

HP
Status
Poly Ccx Devices
Vendor
CVE Published:
9 April 2024

What is CVE-2024-3281?

A flaw exists within the firmware builds of HP CCX devices released between versions 8.0.2.3267 and 8.1.3.1301, permitting unauthorized actors to gain access to restricted resources. This vulnerability arises from weaknesses in the firmware build process, which fail to adequately enforce access controls, potentially leading to unauthorized access by malicious individuals, thereby compromising the device's overall security.

Affected Version(s)

Poly CCX devices See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_10388650-103887...
https://www.syss.de/fileadmin/dokumente/Publikationen/Adv...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.