CVE-2024-28893

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published: May 1, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-288945.3Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP N CVE-2024-288956.1'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerabi CVE-2024-288967.5Secure Boot Security Feature Bypass Vulnerability CVE-2024-288976.8Secure Boot Security Feature Bypass Vulnerability CVE-2024-288986.3Secure Boot Security Feature Bypass Vulnerability CVE-2024-288998.8Secure Boot Security Feature Bypass Vulnerability CVE-2024-28909.1Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animation CVE-2024-289005.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2024-289015.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2024-289025.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2024-289036.7Secure Boot Security Feature Bypass Vulnerability CVE-2024-289047.8Microsoft Brokering File System Elevation of Privilege Vulnerability