CVE-2024-1869

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-01 · updated 2026-06-17
Weakness: CWE-125

Description

Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpose gateway (GGW) over port 9220.

Affected products

HP Cq891C Firmware: before AXP2CN2331AR — fixed in AXP2CN2331AR
HP Cq893C Firmware: before axp2cn2331ar — fixed in axp2cn2331ar

How to fix

Upgrade to a fixed version: HP Cq891C Firmware AXP2CN2331AR; HP Cq893C Firmware axp2cn2331ar. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_10235960-10236033-16/hpsbpi03920
https://support.hp.com/us-en/document/ish_10235960-10236033-16/hpsbpi03920

Get alerted when CVE-2024-1869 or the next vulnerability affects your stack