HPSBHF03711 rev. 3 - HP Sure Sense - Elevation of Privilege

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Ammarit Thongthua, Nuttakorn Tungpoonsup, and Nattakit Intarasorn from Secure D Center Research Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability in HP...

HPSBHF03710 rev. 6 - NVIDIA GPU Display Driver January 2021 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, and Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver and Software...

HPSBPI03709 rev. 1 - Certain HP and Samsung-branded Print Products - IPv6 Network Stack Vulnerability

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has identified a potential security vulnerability with the IPv6 network stack of certain HP and Samsung branded printers that could result in a denial of service. RESOLUTION HP ...

HPSBPI03708 rev. 1 - HP Print and Scan Doctor - Local Elevation of Privilege

Potential Security Impact Local Elevation of Privilege VULNERABILITY SUMMARY HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. RESOLUTION HP has provided updated software, listed in the table below. To obtain the updated software: 1. Go to HP Print and Scan...

HPESBUX04050 rev.1 - HP-UX Web Server Suite running Apache on HP-UX 11iv3, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Code Execution, Cross-Site Scripting XSS, Denial of Service DoS, Disclosure of Sensitive Information, URL Redirection, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Web Server Suite Software -...

HPESBUX04065 rev.1 - HPE HP-UX Perl, Multiple Local and Remote Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Perl Software E.5.28.0.A CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-18311 |...

Driver Disk for HP Smart Array RAID Controller hpsa v3.2.0-3 - For XenServer 6.0.2

BODY font-family: Arial , Helvetica , sans-serif; font-size: 80.0%;H2 font-size: 124.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt; padding-top: 5.0px;H3 font-size: 100.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt;H4 font-size: 80.0%; margin-top: 24.0pt;...

HPSBHF03707 rev. 1 - AMD® Ryzen Master™ Driver October 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD® Ryzen Master™ Driver which might allow escalation of privileges. For detaile...

HP Insight Diagnostics Online Edition Cross-Site Scripting (CVE-2010-4111)

A script injection vulnerability exists in HP Insight Diagnostics. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

HPSBHF03704 rev. 3 - AMD® Firmware TPM November 2020 Security Update

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD Firmware TPM which may allow escalation of privilege...

HP Display Assistant x64 Edition 3.20 - (DTSRVC) Unquoted Service Path Vulnerability

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 Pro x64 es...

HP WMI Service 1.4.8.0 Unquoted Service Path

Exploit Title: HP WMI Service 1.4.8.0 - 'HPWMISVC.exe' Unquoted Service Path Discovery by: Jocelyn Arenas Discovery Date: 2020-11-07 Vendor Homepage: https://www8.hp.com/mx/es/home.html Tested Version: 1.4.8.0 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 10 Home x64 es Step to...

Deep Instinct Windows Agent 1.2.24.0 Unquoted Service Path

Exploit Title: Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path Discovery by: Paulina Girón Discovery Date: 2020-11-07 Vendor Homepage: https://www.deepinstinct.com/ Software Links :...

HP WMI Service 1.4.8.0 - (HPWMISVC.exe) Unquoted Service Path Vulnerability

Exploit Title: HP WMI Service 1.4.8.0 - 'HPWMISVC.exe' Unquoted Service Path Discovery by: Jocelyn Arenas Vendor Homepage: https://www8.hp.com/mx/es/home.html Tested Version: 1.4.8.0 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 10 Home x64 es Step to discover Unquoted Service...

OpenSSL < 0.9.6 Security Bypass Vulnerability

OpenSSL is prone to a security bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Date: 2020-11-08 Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 P...

Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path

Exploit Title: Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path Discovery by: Paulina Girón Discovery Date: 2020-11-07 Vendor Homepage: https://www.deepinstinct.com/ Software Links :...

HP WMI Service 1.4.8.0 - 'HPWMISVC.exe' Unquoted Service Path

Exploit Title: HP WMI Service 1.4.8.0 - 'HPWMISVC.exe' Unquoted Service Path Discovery by: Jocelyn Arenas Discovery Date: 2020-11-07 Vendor Homepage: https://www8.hp.com/mx/es/home.html Tested Version: 1.4.8.0 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 10 Home x64 es Step to...

HPSBHF03703 rev. 4 - Intel® 2020.2 IPU - CSME, SPS, TXE, AMT, and DAL Security Update

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in Intel® Converged Security and...

HPSBHF03705 rev. 6 - BIOS November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: HP, Intel VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in Intel® Processors, BIOS Firmware...