Description
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HP | Certain HP LaserJet Pro Printers | See HP Security Bulletin reference for affected versions. | — |
Advisories 1
- WID-SEC-2024-1230 HP LaserJet: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 23, 2024