A potential security vulnerability has been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege. HP is releasing software updates to mitigate this potential vulnerability.
Vendor
hp inc vulnerabilities
5 published CVES affecting hp inc, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- business desktop pcs 1
- business notebook pcs 1
- hp one agent software 1
- hp printer firmware update utility 1
- plantronics hub 1
- samsung universal print driver 1
- thin client 1
- workstations 1
Latest hp inc CVEs
Newest publication first
-
HighCVSS 8.0 EPSS 0.17%
-
HighCVSS 7.8 EPSS 0.15%
The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018.
-
CVE-2024-27460 A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.
PublishedMediumCVSS 6.7 EPSS 1.7%A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.
-
MediumCVSS 6.3 EPSS 0.21%
A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code e...
-
HighCVSS 8.2 EPSS 0.18%
A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.