TI-2024-05348 Aliases CVE-2024-5760 GHSA-94f8-mx94-9x98

Improper privilege management in Hewlett Packard Enterprise Samsung Universal Print Driver

MEDIUM 43CWE-269Published 2024-09-11 · Updated 2024-09-11

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Privilege escalation
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-269.

Summary

The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00146 3rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise	Samsung Universal Print Driver	3.00.16.0101	—	No fix listed	CNA

Samsung Universal Print Driver VendorHewlett Packard Enterprise Affected 3.00.16.0101 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:samsung:universal_print_driver:3.00.16.0101:::::::*	3.00.16.0101	Vulnerable	Samsung
cpe:2.3:o:microsoft:windows:-:::::::*	not specified by NVD	Running on	Microsoft

cpe:2.3:a:samsung:universal_print_driver:3.00.16.0101:*:*:*:*:*:*:* Versions 3.00.16.0101 Vulnerable ·Samsung
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-5760
2026-10-03 Alias added: GHSA-94f8-mx94-9x98

References

Advisory 1

https://support.hp.com/us-en/document/ish_11159589-11159645-16/hpsbpi03970

TI-2017-03639 Improper handling of exceptional conditions in Apache Struts KEVCVSS 3.1CRITICAL 9.8
TI-2015-02747 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x… KEVCVSS 3.1CRITICAL 9.8
TI-2013-04219 HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM)… KEVCVSS 3.1CRITICAL 9.8
TI-2012-01607 sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI… KEVCVSS 3.1CRITICAL 9.8
TI-2005-02634 HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute… KEVCVSS 3.1CRITICAL 9.8
TI-2015-07113 Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before… KEVCVSS 3.1HIGH 8.8

See all 2514 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences