CVE-2024-2209: HP 26k67a Firmware

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.

Affected products

  • HP 26k67a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 26k67b Firmware: before 2349c (fixed in 2349c); before 2349b (fixed in 2349b); before 2349d (fixed in 2349d)
  • HP 26k68a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 26k68b Firmware: before 2349c (fixed in 2349c); before 2349b (fixed in 2349b); before 2349d (fixed in 2349d)
  • HP 26k69a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 26k70a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 26k70b Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 26k71a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 26k72a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 26k72b Firmware: before 2349c (fixed in 2349c); before 2349b (fixed in 2349b); before 2349d (fixed in 2349d)
  • HP 297w8a Firmware: before 2349c (fixed in 2349c); before 2349b (fixed in 2349b); before 2349d (fixed in 2349d)
  • HP 297x0a Firmware: before 2349c (fixed in 2349c); before 2349b (fixed in 2349b); before 2349d (fixed in 2349d)
  • HP 297x1a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 2a9q5a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 3xv17a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 3xv19a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 4ws04a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 5ar83a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 5ar84a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 5ar85a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 7fr20a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c)
  • HP 7fr21a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 7fr52a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 7fr53a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • HP 7fr57a Firmware: before 2349b (fixed in 2349b); before 2349c (fixed in 2349c); before 2349d (fixed in 2349d)
  • and 3 more

Published 2024-03-27. Last modified 2026-06-17.