CVE-2022-24291

Deeper analysis

Certain HP Print devices are affected by CVE-2022-24291, a vulnerability that may permit information disclosure, denial of service, or remote code execution. The flaw carries a CVSS 3.1 base score of 7.5 reflecting network attack vector, low complexity, and no required credentials or user interaction, with the provided vector emphasizing high availability impact.

Remote attackers without authentication can target exposed devices over the network to trigger the listed effects. The CVSS metrics indicate that successful exploitation can produce significant disruption to device availability while leaving confidentiality and integrity nominally unaffected according to the published vector.

HP has published mitigation guidance in support documents available at the referenced URLs. Administrators should consult those advisories for device-specific remediation steps.

EPSS for the CVE rose from a low baseline after 2022 disclosure to a peak of 0.0983 on 2025-12-11 before receding to the current value of 0.0176, indicating that exploitation interest increased well after public release.