Medium severity6.3NVD Advisory· Published Mar 27, 2024· Updated Jun 17, 2026

CVE-2024-2209

Description

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.

Affected products

Microfocus/26k67a Firmware
cpe:2.3:o:hp:26k67a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/26k67b Firmware
cpe:2.3:o:hp:26k67b_firmware:*:*:*:*:*:*:*:*
Range: <2349c
Microfocus/26k68a Firmware
cpe:2.3:o:hp:26k68a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/26k68b Firmware
cpe:2.3:o:hp:26k68b_firmware:*:*:*:*:*:*:*:*
Range: <2349c
Microfocus/26k69a Firmware
cpe:2.3:o:hp:26k69a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/26k70a Firmware
cpe:2.3:o:hp:26k70a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/26k70b Firmware
cpe:2.3:o:hp:26k70b_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/26k71a Firmware
cpe:2.3:o:hp:26k71a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/26k72a Firmware
cpe:2.3:o:hp:26k72a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/26k72b Firmware
cpe:2.3:o:hp:26k72b_firmware:*:*:*:*:*:*:*:*
Range: <2349c
Microfocus/297w8a Firmware
cpe:2.3:o:hp:297w8a_firmware:*:*:*:*:*:*:*:*
Range: <2349c
Microfocus/297x0a Firmware
cpe:2.3:o:hp:297x0a_firmware:*:*:*:*:*:*:*:*
Range: <2349c
Microfocus/297x1a Firmware
cpe:2.3:o:hp:297x1a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/2a9q5a Firmware
cpe:2.3:o:hp:2a9q5a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/3xv17a Firmware
cpe:2.3:o:hp:3xv17a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/3xv19a Firmware
cpe:2.3:o:hp:3xv19a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/4ws04a Firmware
cpe:2.3:o:hp:4ws04a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/5ar83a Firmware
cpe:2.3:o:hp:5ar83a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/5ar84a Firmware
cpe:2.3:o:hp:5ar84a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/5ar85a Firmware
cpe:2.3:o:hp:5ar85a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/7fr20a Firmware
cpe:2.3:o:hp:7fr20a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/7fr21a Firmware
cpe:2.3:o:hp:7fr21a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/7fr52a Firmware
cpe:2.3:o:hp:7fr52a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/7fr53a Firmware
cpe:2.3:o:hp:7fr53a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/7fr57a Firmware
cpe:2.3:o:hp:7fr57a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/7fr58a Firmware
cpe:2.3:o:hp:7fr58a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/7fr61a Firmware
cpe:2.3:o:hp:7fr61a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/8rk11a Firmware
cpe:2.3:o:hp:8rk11a_firmware:*:*:*:*:*:*:*:*
Range: <2349b
Microfocus/Firmware Update Utilityllm-create
HP, Inc./HP Printer Firmware Update Utilityv5
Range: See HP security bulletin reference for affected versions

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2024-2209

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions