HPESBGN03752 rev.1 - HPE IceWall using OpenSSL, remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 HP-UX 11i v3 - using OpenSSL IceWall SSO certd 10.0 HP-UX 11i v3 - using OpenSSL IceWall MCRP 3.0 HP-UX 11i v3 - using OpenSSL CVSS Scores: | CVE | CVSS...

HP SimplePass 8.x Local Privilege Escalation

Vulnerability Title: HP SimplePass Local Privilege Escalation Advisory Release Date: 05/18/2017 Credit: Discovered By Rehan Ahmed Contact: [email protected] Severity Level: Medium Type: Local Tested Platform: Windows 8 & 10 x64 Vendor: HP Inc. Vendor Site: http://www.hp.com Download Link:...

Fedora 24 : sane-backends (2017-0f5fe1913f)

CVE-2017-6318 sane-backends: SANENETCONTROLOPTION response packet may contain memory contents of the server fedora-all ---- This update adds the 'skip-adf' option to the avision driver. This let users work around problems on HP ScanJet 82xx/83xx scanners with no automatic document feeder attached...

h20386.www2.hp.com XSS vulnerability

Vulnerable URL: http://h20386.www2.hp.com/CanadaStore/?jumpid=...

HP ERK-321A Wireless Mouse Spoofing Vulnerability

The HP ERK-321A is a wireless desktop device consisting of a mouse and keyboard. A spoofing vulnerability exists in the HP ERK-321A Wireless Mouse, which can be exploited by an attacker to launch a mouse spoofing attack due to unencrypted and unauthenticated mouse data communication...

Keylogger Found in HP Laptop Audio Drivers

This is a weird story: researchers have discovered that an audio driver installed in some HP laptops includes a keylogger, which records all keystrokes to a local file. There seems to be nothing malicious about this, but it's a vivid illustration of how hard it is to secure a modern computer. The...

HP Network Automation Remote Unauthenticated Access Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A security vulnerability exist...

On the Microsoft Malware Protection RCE, Handbrake, and Trump's EO

Mike Mimoso and Chris Brook discuss the news of the week, including Tavis Ormandy and Natalie Silvanovich’s Microsoft Malware Protection Engine bug, Handbrake OS X malware, the HP keylogger, Trump’s Cybersecurity EO, and more. Download: ThreatpostNewsWrapMay122017.mp3 Music by Chris Gonsalves...

CVE-2017-8360

Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data keystrokes to any process. In mictray64.exe mic tray icon 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: deb...

CVE-2017-8360

Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data keystrokes to any process. In mictray64.exe mic tray icon 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: deb...

CVE-2017-8360

Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data keystrokes to any process. In mictray64.exe mic tray icon 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: deb...

CVE-2017-8360

The CVE-2017-8360 issue affects Conexant mictray64/mictray.exe used on HP EliteBook/EliteBook/ProBook/ZBook systems. A LowLevelKeyboardProc Windows hook is used to capture keystrokes, and the keystroke data is disclosed via unintended channels: debug messages accessible to processes in the same u...

HPSBGN03558 rev.9 - Conexant HD Audio Driver Local Debug Log

Potential Security Impact Potential, local loss of confidentiality VULNERABILITY SUMMARY A potential security vulnerability caused by a local debugging capability that was not disabled prior to product launch has been identified with certain versions of Conexant HD Audio Drivers on HP products. H...

HP Network Automation 9.x, 10.x < 10.00.022 / 10.1x.x < 10.11.03 / 10.20.x < 10.21.01 Multiple Vulnerabilities

The HP Network Automation application running on the remote host is version 9.1x, 9.2x, or 10.00.x prior to 10.00.022; 10.10.x or 10.11.x prior to 10.11.03; or 10.20.x prior to 10.21.01. It is, therefore, affected by multiple vulnerabilities : - A SQL injection vulnerability exists in the...

CVE-2015-5436

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

Code injection

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

CVE-2015-5436

HP Integrated Lights-Out 4 (iLO 4) firmware versions 2.11 through 2.29 are affected by CVE-2015-5436; the vulnerability could be exploited remotely to cause a Denial of Service (DoS). Public technical details are limited in the provided documents; exploitation status is not specified. Remediation...

CVE-2015-5436

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

Keylogger Found in Audio Drivers on Some HP Machines

An audio driver that comes installed on some HP-manufactured computers records users’ keystrokes and stores them in a world-readable plaintext file, researchers said Thursday. The culprit appears to be version 1.0.0.31 of MicTray64.exe, a program that comes installed with the Conexant audio drive...

Beware! Built-in Keylogger Discovered In Several HP Laptop Models

Do you own a Hewlett-Packard HP laptop? Yes? Just stop whatever you are doing and listen carefully: Your HP laptop may be silently recording everything you are typing on your keyboard. While examining Windows Active Domain infrastructures, security researchers from the Switzerland-based security...