CVE-2024-2209 – HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code

https://notcve.org/view.php?id=CVE-2024-2209

26 Mar 2024 — A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution. Un usuario con privilegios administrativos puede crear un archivo dll comprometido con el mismo nombre que el dll original dentro del paquete Firmware Update Utility (FUU) de la impresora HP y colocarlo en el directorio de... • https://support.hp.com/us-en/document/ish_10354903-10354932-16 • CWE-94: Improper Control of Generation of Code ('Code Injection') •