CVE-2024-2301: HP CZ172A Firmware

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device.

Affected products

• HP CZ172A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ173A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ174A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ175A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ176A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ177A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ178A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ181A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ182A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ183A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ184A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ185A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ186A Firmware: before 2023-03-30 (fixed in 2023-03-30)
• HP CZ187A Firmware: before 2023-03-30 (fixed in 2023-03-30)

Published 2024-05-23. Last modified 2026-06-17.