CVE-2019-11146

Intel Driver & Support Assistant (before 19.7.30.2) is affected by CVE-2019-11146 due to improper file verification, which may allow an authenticated user to escalate privileges via local access. The issue is reported across multiple sources, including Intel’s advisory (Intel-SA-00276) and Red Ha...

CVE-2019-11145

Intel Driver & Support Assistant (before 19.7.30.2) is affected by an elevation-of-privilege issue due to improper file verification/directories. An authenticated local user could potentially escalate privileges. Intel and partners (Red Hat, CNVD, etc.) reference CVE-2019-11145. Remediation: upda...

CVE-2019-11145

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Driver & Support Assistant Advisory

Summary: A potential security vulnerability in Intel® Driver & Support Assistant may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11145 Description: Improper directory permissions for Intel®...

The vulnerability of the HP Support Assistant software, a centralized device management tool, stems from deficiencies in access control. This allows attackers to obtain system privileges and perform unauthorized changes to catalogs or files.

The vulnerability of the HP Support Assistant software for centralized device management is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain system privileges and perform unauthorized changes to catalogs or files...

HP Support Assistant < 8.8 Multiple Vulnerabilities

The version of HP Support Assistant installed on the remote Windows host is prior to 8.8. It is, therefore, affected by two unspecified privilege escalation vulnerabilities. An authenticated, local attacker can exploit this, to gain system level access to the system. C Tenable Network Security,...

The vulnerability of the HP Support Assistant software, a centralized device management tool, stems from deficiencies in access control. This allows attackers to obtain system privileges and perform unauthorized changes to catalogs or files.

The vulnerability of the HP Support Assistant software for centralized device management is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain system privileges and perform unauthorized changes to catalogs or files...

HP Support Assistant elevation of privilege vulnerability (CNVD-2019-23306)

HP Support Assistant is a utility program included in all HP computers to diagnose technical problems and manage updates. An elevation of privilege vulnerability exists in HP Support Assistant 8.7.50 and earlier versions. An attacker could use this vulnerability to gain system privileges and make...

CVE-2019-6328

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

CVE-2019-6328

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

CVE-2019-6329

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328...

CVE-2019-6329

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328...

Code injection

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

CVE-2019-6329

CVE-2019-6329 is a local privilege escalation affecting HP Support Assistant 8.7.50 and earlier. The connected exploit repository details a chain: when the user triggers the HP.SupportFramework.ServiceManager interface RunAnalysis, HPSAObjUtil8.exe runs with SYSTEM privileges and modifies permiss...

CVE-2019-6329

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328...

CVE-2019-6328

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

CVE-2019-6328

CVE-2019-6328 affects HP Support Assistant 8.7.50 and earlier. Connected exploit details describe a local privilege escalation via the HP Support Framework service: the HPSAObjUtil8 component changes permissions of XML files under C:\ProgramData\Hewlett-Packard\HP Support Framework\Logs\Temp\HPSA...

HPSBGN03620 rev. 4 - HP Support Assistant Escalation of Privilege Vulnerability

Potential Security Impact Elevation of privilege and unauthorized modification of directories or files. Source: HP, HP Product Security Response Team PSRT Reported by: Philippe Laulheret McAfee Advanced Threat Research, ManhNDd Bkav Corporation VULNERABILITY SUMMARY The vulnerability allows a use...

The vulnerability of the software for updating Intel Driver & Support Assistant, related to access control deficiencies, allows a hacker to disclose protected information.

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

The software’s vulnerability regarding driver updates for Intel Driver & Support Assistant, due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The software for updating Intel Driver & Support Assistant has a vulnerability due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...