Medium severity6.8NVD Advisory· Published May 23, 2024· Updated Jun 17, 2026

CVE-2024-5143

Description

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.

Affected products

Microfocus/W1a75a Firmware
cpe:2.3:o:hp:w1a75a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/W1a76a Firmware
cpe:2.3:o:hp:w1a76a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/W1a77a Firmware
cpe:2.3:o:hp:w1a77a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/W1a78a Firmware
cpe:2.3:o:hp:w1a78a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/W1a79a Firmware
cpe:2.3:o:hp:w1a79a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/W1a80a Firmware
cpe:2.3:o:hp:w1a80a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/W1a81a Firmware
cpe:2.3:o:hp:w1a81a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/W1a82a Firmware
cpe:2.3:o:hp:w1a82a_firmware:*:*:*:*:*:*:*:*
Range: <002_2413A
Microfocus/devicellm-create
HP Inc./Certain HP LaserJet Pro Printersv5
Range: See HP Security Bulletin reference for affected versions.

Patches

Vulnerability mechanics

References

support.hp.com/us-en/document/ish_10643804-10643841-16/HPSBPI03941nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000