{"timestamp":"2024-04-10T18:59:30.335810Z","id":"CVE-2024-3281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"HP Inc.","product":"Poly CCX devices","defaultStatus":"unknown","versions":[{"version":"See HP Security Bulletin reference for affected versions.","status":"affected"}]}]

AND
     OR
          *cpe:2.3:o:hp:poly_ccx_350:*:*:*:*:*:*:*:* versions from (including) 8.0.2.3267 up to (excluding) 8.1.3.1301
     OR
          cpe:2.3:h:hp:poly_ccx_350:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:hp:poly_ccx_400:*:*:*:*:*:*:*:* versions from (including) 8.0.2.3267 up to (excluding) 8.1.3.1301
     OR
          cpe:2.3:h:hp:poly_ccx_400:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:hp:poly_ccx_500:*:*:*:*:*:*:*:* versions from (including) 8.0.2.3267 up to (excluding) 8.1.3.1301
     OR
          cpe:2.3:h:hp:poly_ccx_500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:hp:poly_ccx_505:*:*:*:*:*:*:*:* versions from (including) 8.0.2.3267 up to (excluding) 8.1.1301
     OR
          cpe:2.3:h:hp:poly_ccx_505:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:hp:poly_ccx_600:*:*:*:*:*:*:*:* versions from (including) 8.0.2.3267 up to (excluding) 8.1.3.1301
     OR
          cpe:2.3:h:hp:poly_ccx_600:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:hp:poly_ccx_700:*:*:*:*:*:*:*:* versions from (including) 8.0.2.3267 up to (excluding) 8.1.3.1301
     OR
          cpe:2.3:h:hp:poly_ccx_700:-:*:*:*:*:*:*:*

CVE: https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929 Types: Vendor Advisory

CVE: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt Types: Exploit, Third Party Advisory

HP Inc.: https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929 Types: Vendor Advisory

HP Inc.: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt Types: Exploit, Third Party Advisory

https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt

CISA-ADP AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

CISA-ADP CWE-306

HP Inc. https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt [No types assigned]

A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor.

HP Inc. https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929 [No types assigned]