CVE-2022-24292 Other in HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers

Critical 9.8 Published 23 Mar 2022 Updated 3 Aug 2024

Attackers can achieve remote code execution, denial of service, or information disclosure on vulnerable HP printers.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-24292?

CVE-2022-24292 is a critical vulnerability in HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers, published on 23 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.

Which versions are affected by CVE-2022-24292?

It affects 68 products.

Products include Hp Laserjet Pro M304-M305 W1a46a Firmware, Hp Laserjet Pro M304-M305 W1a47a Firmware, Hp Laserjet Pro M304-M305 W1a48a Firmware, Hp Laserjet Pro M304-M305 W1a51a Firmware, Hp Laserjet Pro M304-M305 W1a52a Firmware, Hp Laserjet Pro M304-M305 W1a53a Firmware and 62 more.

How do I fix CVE-2022-24292?

No fix has been published for CVE-2022-24292 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-24292 being exploited?

There is no known exploitation of CVE-2022-24292 in the wild and no public exploit code.

Sources

Also known as GHSA-69x8-gq9p-3423.