Design/Logic Flaw

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 SP8. The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 SP9. HP has released Service Pack 10 SP10 to remediate the potential vulnerability introduced in SP8...

CVE-2022-1602

CVE-2022-1602 concerns HP ThinPro 7.2 SP8. The vulnerability originates in SP8 and is not remedied by upgrading to SP9; HP released SP10 to remediate the issue introduced in SP8. Affected software: HP ThinPro 7.2 with SP8 (and through SP9 as per PT/Red Hat/Radiation entries). Impact details in th...

CVE-2022-1602

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 SP8. The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 SP9. HP has released Service Pack 10 SP10 to remediate the potential vulnerability introduced in SP8...

PT-2022-13998 · Hewlett Packard · Hp Thinpro

Name of the Vulnerable Software and Affected Versions: HP ThinPro 7.2 versions 7.2 Service Pack 8 through 7.2 Service Pack 9 Description: A potential security issue has been identified. HP has released Service Pack 10 to address the issue introduced in Service Pack 8. Recommendations: For HP...

High-Severity Firmware Security Flaws Left Unpatched in HP Enterprise Devices

A number of firmware security flaws uncovered in HP's business-oriented high-end notebooks continue to be left unpatched in some devices even months after public disclosure. Binarly, which first revealed details of the issues at the Black Hat USA conference in mid-August 2022, said the...

A week in security (September 5 – 11)

Last week on Malwarebytes Labs: Phishers use verified status as bait for Instagram users Microsoft will disable Basic authentication for Exchange Online in less than a month Zero-day puts a dent in Chrome's mojo Update now! QNAP warns users DeadBolt is exploiting Photo Station vulnerability Don't...

Vulnerability fixed in HP Support Assistant

HP has fixed a vulnerability in the Support Assistant, software installed by default on desktops and notebooks from HP. The vulnerability allows a local malicious party to increase its permissions. HP has released version 9.11 as an update to fix the problem. fix. For more information, see:...

Your HP Support Assistant needs an update!

HP has issued a new version of its HP Support Assistant tool. Users of HP Support Assistant versions earlier than 9.11 and Fusion versions earlier than 1.38.2601.0 are affected by a high severity vulnerability. According to HP it is possible for an attacker to exploit a dynamic-link library DLL...

Privilege escalation in HP Support Assistant

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up. HP strives to...

PT-2022-4714 · Hewlett Packard · Hp Support Assistant +1

Name of the Vulnerable Software and Affected Versions: HP Support Assistant version 9 Description: The issue is related to a DLL hijacking vulnerability in HP Support Assistant, which uses HP Performance Tune-up as a diagnostic tool. This vulnerability can be exploited by an attacker to elevate...

Certain HP Print Products, Digital Sending products - Potential denial of service vulnerability

Certain HP Print and Digital Send products may potentially be vulnerable to a Denial of Service DOS attack when elliptical curve certificates are used. Update the printer software...

Ubuntu: Security Advisory (USN-2023-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Certain HP PageWide Pro printers - Potential denial of service

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack. HP has provided firmware updates for potentially affected products listed in the table below...

PT-2022-4404 · Hewlett Packard · Hp Laptop Bios

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the System Management Mode SMM implementation of the HP laptop BIOS firmware. This could allow an...

Intel® Wireless Bluetooth® and Killer™ Bluetooth® August 2022 Security Update

Intel has informed HP of potential security vulnerabilities identified in some Intel® Wireless Bluetooth® and Killer™ Bluetooth® products, which might allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software and firmware updates to mitigate these...

HP PC BIOS August 2022 Security Updates for Potential SMM and TOCTOU Vulnerabilities

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities. HP has...

Intel® RST Software August 2022 Security Update

Intel has informed HP of a potential security vulnerability identified in the Intel® Rapid Storage Technology RST software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential...

Intel® Ethernet Controllers August 2022 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Ethernet Controllers and Adapters which may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP...

Intel 2022.2 IPU BIOS Security Updates

Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified...

Intel® PROSet/Wireless WiFi and Killer™ WiFi August 2022 Security Update

Intel has informed HP of potential vulnerabilities identified in some Intel® PROSet/Wireless WiFi and Killer™ WiFi products, which might allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware and software updates to mitigate these potential...