CVE-2023-32674

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow...

CVE-2023-32674

CVE-2023-32674 affects HP PC Hardware Diagnostics Windows (and related tools) with a potential buffer overflow that could lead to elevation of privilege. Connected HP HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware advisories indicate affected platforms...

CVE-2023-32673

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...

CVE-2023-32673

CVE-2023-32673 affects HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware. The issue is a potential elevation of privilege in these HP components; HP advisories reference a buffer overflow as part of the risk and note mitigations via updates (minimum versi...

CVE-2023-32673

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...

CVE-2023-26298

CVE-2023-26298 affects HP Device Manager (HPDM) prior to version 5.0.10. The root cause is command execution and/or elevation of privileges in vulnerable HPDM components, with the vulnerability exploitable remotely (per CVSS 3.1 vector). HP's security advisory and subsequent HPDM 5.0.10 release a...

CVE-2023-26298

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26298

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26297

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26297

HP Device Manager (HPDM) versions prior to 5.0.10 have a vulnerability allowing command injection and/or elevation of privileges. This CVE is corroborated across multiple sources, which identify HPDM 5.0.10 as the fixed version. The CVSS v3.1 base score is 8.8 ( HIGH ) with network attack vector,...

CVE-2023-26297

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26296

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26296

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26296

The CVE-2023-26296 entry concerns HP Device Manager (HPDM) prior to version 5.0.10, where a command injection and/or elevation of privileges vulnerability is reported. The connected documents confirm the affected software is HPDM, and identify the underlying issue as a vulnerability in versions b...

CVE-2023-26295

HP Device Manager (HPDM) versions prior to 5.0.10 are affected by a vulnerability allowing command injection and/or elevation of privileges. The issue is tied to HPDM before version 5.0.10 and is addressed by upgrading to HPDM 5.0.10 or later. HP’s security advisory HPSBHF03842 confirms fixes inc...

CVE-2023-26295

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26294

The CVE-2023-26294 entry concerns HP Device Manager (HPDM) prior to version 5.0.10, where a command injection and/or privilege elevation vulnerability exists. Multiple sources confirm the issue affects HPDM versions before 5.0.10, with a published fix in HPDM 5.0.10 released on 2023-03-29 to miti...

CVE-2023-26294

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26294

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2022-43778

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...