CVE-2024-5143: HP w1a75a Firmware

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.

Affected products

• HP w1a75a Firmware: before 002_2413A (fixed in 002_2413A)
• HP w1a76a Firmware: before 002_2413A (fixed in 002_2413A)
• HP w1a77a Firmware: before 002_2413A (fixed in 002_2413A)
• HP w1a78a Firmware: before 002_2413A (fixed in 002_2413A)
• HP w1a79a Firmware: before 002_2413A (fixed in 002_2413A)
• HP w1a80a Firmware: before 002_2413A (fixed in 002_2413A)
• HP w1a81a Firmware: before 002_2413A (fixed in 002_2413A)
• HP w1a82a Firmware: before 002_2413A (fixed in 002_2413A)

Published 2024-05-23. Last modified 2026-06-17.