Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v36q-qx7x-fwf9

Опубликовано: 12 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

EPSS

Процентиль: 60%
0.00401
Низкий

7.8 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.8
nvd
около 3 лет назад

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

CVSS3: 8.2
fstec
больше 3 лет назад

Уязвимость инструмента оптимизации производительности системы HP Performance Tune-up программного средства автоматизированной поддержки и обновления драйверов HP Support Assistant, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 60%
0.00401
Низкий

7.8 High

CVSS3

Дефекты

CWE-427