CVE-2024-0407: Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Information Disclosure

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-21 · updated 2026-06-17

Description

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store.

Affected products

HP Futuresmart 3: before 2309110_002023; before 2309110_002029; before 2309110_002016; before 2309110_002022; before 2309110_002028 — fixed in 2309110_002016, 2309110_002022, 2309110_002023, 2309110_002028, 2309110_002029
HP Futuresmart 4: before 2411265_067635; before 2411265_067634; before 2411265_067627; before 2411265_067630; before 2411265_067628; before 2411265_067632 — fixed in 2411265_067627, 2411265_067628, 2411265_067630, 2411265_067632, 2411265_067634, 2411265_067635
HP Inc. HP FutureSmart: before 2507252_046145; before 2507252_046159; before 2507252_046129; before 2507252_046112; before 2507252_046140; before 2507252_046117 — fixed in 2507252_046109, 2507252_046110, 2507252_046111, 2507252_046112, 2507252_046113, 2507252_046114

How to fix

Upgrade to a fixed version: HP Futuresmart 3 2309110_002016, 2309110_002022, 2309110_002023, 2309110_002028; HP Futuresmart 4 2411265_067627, 2411265_067628, 2411265_067630, 2411265_067632; HP Inc. HP FutureSmart 2507252_046109, 2507252_046110, 2507252_046111, 2507252_046112. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-0407 or the next vulnerability affects your stack