CVE-2022-24292
Published: 23 March 2022
Summary
CVE-2022-24292 is a critical-severity an unspecified weakness vulnerability in Hp Laserjet Pro M304-M305 W1A47A Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 15.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Certain HP Print devices are affected by CVE-2022-24292, a vulnerability that can result in information disclosure, denial of service, or remote code execution. The issue carries a CVSS v3.1 score of 9.8 and is described only at a high level with no specific CWE assigned.
An unauthenticated attacker with network access can exploit the flaw without user interaction, potentially obtaining sensitive data, disrupting device availability, or executing arbitrary code on the affected printers.
HP has published support documents addressing the issue at the referenced URLs, which practitioners should consult for available firmware updates or configuration guidance.
The EPSS score for this CVE rose from lower values to a peak of 0.1133 on 2025-12-11 before receding to the current 0.0204, indicating a period of increased exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-29194
Vulnerability details
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.