CVE-2024-28893

2024-05-0116:15:07

[email protected]

web.nvd.nist.gov

software packages

arbitrary code execution

vulnerability

softpaqs

configuration file

modified

extraction

nvd

8.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

JSON

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

References

support.hp.com/us-en/document/ish_10502451-10502508-16/hpsbhf03931