Back to Database
Status published
Unknown
CVE-2024-2209
HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code
Vulnerability Description
A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2209
Credits & Attribution
No credits recorded in the NVD database.
More from HP, Inc.
View All →CVE-2025-43491
Poly Lens Desktop Application – Privilege Escalation
High
7.3
CVE-2025-43490
HP Hotkey Support – Escalation of Privilege
High
8.4
CVE-2025-43026
HP Support Assistant – Potential Escalation of Privilege
High
7.1
CVE-2025-43023
HP Linux Imaging and Printing Software - Use of DSA Key
Medium
5.9
CVE-2025-43018
Certain HP LaserJet Pro Printers – Potential Information Disclosure
Medium
6.9
Affected Vendor
HP, Inc.
View all reports →Affected Software
HP Printer Firmware Update Utility
Vulnerable Versions:
See HP security bulletin reference for affected versions
Timeline
Official Publish:
March 26th, 2024
Last Modified:
August 6th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.