UC Software – Improper Access Control

2024-04-0400:00:00

HP Product Security Response Team

support.hp.com

improper access control

firmware vulnerability

ccx devices

resource access restriction

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor.

The recommendation is to update an impacted device to the latest firmware build; there is no workaround.