9.8

CVE-2021-3437

Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Omen Gaming Hub Version < 11.6.3.0
   Hp ≫ Envy Te01-0xxx Version -
   Hp ≫ Envy Te01-1xxx Version -
   Hp ≫ Envy Te01-2xxx Version -
   Hp ≫ Omen 25l Desktop Pc Gt11-1000i Version -
   Hp ≫ Omen 25l Desktop Pc Gt12-1000i Version -
   Hp ≫ Omen 873-0xxx Version -
   Hp ≫ Omen 880-0xx Version -
   Hp ≫ Omen 880-1xx Version -
   Hp ≫ Omen 880-5xx Version -
   Hp ≫ Omen Desktop Pc 25l Gt11-0xxxa Version -
   Hp ≫ Omen Desktop Pc 25l Gt11-0xxxi Version -
   Hp ≫ Omen Desktop Pc 25l Gt12-0xxxa Version -
   Hp ≫ Omen Desktop Pc 25l Gt12-0xxxi Version -
   Hp ≫ Omen Desktop Pc 30l Gt13-0xxxa Version -
   Hp ≫ Omen Desktop Pc 30l Gt13-0xxxi Version -
   Hp ≫ Omen Desktop Pc 30l Gt13-1xxxi Version -
   Hp ≫ Omen Laptop 15-ce0xx Version -
   Hp ≫ Omen Laptop 15-ce1xx Version -
   Hp ≫ Omen Laptop 15-dc0xxx Version -
   Hp ≫ Omen Laptop 15-dc1xxx Version -
   Hp ≫ Omen Laptop 15-dc2xxx Version -
   Hp ≫ Omen Laptop 15-dg0xxx Version -
   Hp ≫ Omen Laptop 15-dh0xxx Version -
   Hp ≫ Omen Laptop 15-dh1xxx Version -
   Hp ≫ Omen Laptop 15-ek0xxx Version -
   Hp ≫ Omen Laptop 15-ek1xxx Version -
   Hp ≫ Omen Laptop 15-en0xxx Version -
   Hp ≫ Omen Laptop 15-en1xxx Version -
   Hp ≫ Omen Laptop 17-an0xx Version -
   Hp ≫ Omen Laptop 17-an1xx Version -
   Hp ≫ Omen Laptop 17-ap0xx Version -
   Hp ≫ Omen Laptop 17-cb0xxx Version -
   Hp ≫ Omen Laptop 17-cb1xxx Version -
   Hp ≫ Omen Obelisk 875-0xxx Version -
   Hp ≫ Omen Obelisk 875-1xxx Version -
   Hp ≫ Omen X 900-1xx Version -
   Hp ≫ Omen X 900-2xx Version -
   Hp ≫ Omen X P1000-0xx Version -
   Hp ≫ Pavilion Gaming Laptop 15-dk2xxx Version -
   Hp ≫ Pavilion Gaming Laptop 15-ec2xxx Version -
   Hp ≫ Pavilion Gaming Laptop 16-a0xxx Version -
   Hp ≫ Pavilion Gaming Tg01-0xxxa Version -
   Hp ≫ Pavilion Gaming Tg01-0xxxi Version -
   Hp ≫ Pavilion Gaming Tg01-1xxxa Version -
   Hp ≫ Pavilion Gaming Tg01-1xxxi Version -
   Hp ≫ Pavilion Gaming Tg01-2xxx Version -
   Hp ≫ Pavilion Tp01-0xxx Version -
   Hp ≫ Pavilion Tp01-1xxx Version -
Hp ≫ Omen Gaming Hub Sdk Version < 1.0.44
   Hp ≫ Envy Te01-0xxx Version -
   Hp ≫ Envy Te01-1xxx Version -
   Hp ≫ Envy Te01-2xxx Version -
   Hp ≫ Omen 25l Desktop Pc Gt11-1000i Version -
   Hp ≫ Omen 25l Desktop Pc Gt12-1000i Version -
   Hp ≫ Omen 873-0xxx Version -
   Hp ≫ Omen 880-0xx Version -
   Hp ≫ Omen 880-1xx Version -
   Hp ≫ Omen 880-5xx Version -
   Hp ≫ Omen Desktop Pc 25l Gt11-0xxxa Version -
   Hp ≫ Omen Desktop Pc 25l Gt11-0xxxi Version -
   Hp ≫ Omen Desktop Pc 25l Gt12-0xxxa Version -
   Hp ≫ Omen Desktop Pc 25l Gt12-0xxxi Version -
   Hp ≫ Omen Desktop Pc 30l Gt13-0xxxa Version -
   Hp ≫ Omen Desktop Pc 30l Gt13-0xxxi Version -
   Hp ≫ Omen Desktop Pc 30l Gt13-1xxxi Version -
   Hp ≫ Omen Laptop 15-ce0xx Version -
   Hp ≫ Omen Laptop 15-ce1xx Version -
   Hp ≫ Omen Laptop 15-dc0xxx Version -
   Hp ≫ Omen Laptop 15-dc1xxx Version -
   Hp ≫ Omen Laptop 15-dc2xxx Version -
   Hp ≫ Omen Laptop 15-dg0xxx Version -
   Hp ≫ Omen Laptop 15-dh0xxx Version -
   Hp ≫ Omen Laptop 15-dh1xxx Version -
   Hp ≫ Omen Laptop 15-ek0xxx Version -
   Hp ≫ Omen Laptop 15-ek1xxx Version -
   Hp ≫ Omen Laptop 15-en0xxx Version -
   Hp ≫ Omen Laptop 15-en1xxx Version -
   Hp ≫ Omen Laptop 17-an0xx Version -
   Hp ≫ Omen Laptop 17-an1xx Version -
   Hp ≫ Omen Laptop 17-ap0xx Version -
   Hp ≫ Omen Laptop 17-cb0xxx Version -
   Hp ≫ Omen Laptop 17-cb1xxx Version -
   Hp ≫ Omen Obelisk 875-0xxx Version -
   Hp ≫ Omen Obelisk 875-1xxx Version -
   Hp ≫ Omen X 900-1xx Version -
   Hp ≫ Omen X 900-2xx Version -
   Hp ≫ Omen X P1000-0xx Version -
   Hp ≫ Pavilion Gaming Laptop 15-dk2xxx Version -
   Hp ≫ Pavilion Gaming Laptop 15-ec2xxx Version -
   Hp ≫ Pavilion Gaming Laptop 16-a0xxx Version -
   Hp ≫ Pavilion Gaming Tg01-0xxxa Version -
   Hp ≫ Pavilion Gaming Tg01-0xxxi Version -
   Hp ≫ Pavilion Gaming Tg01-1xxxa Version -
   Hp ≫ Pavilion Gaming Tg01-1xxxi Version -
   Hp ≫ Pavilion Gaming Tg01-2xxx Version -
   Hp ≫ Pavilion Tp01-0xxx Version -
   Hp ≫ Pavilion Tp01-1xxx Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.55% 0.964
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://support.hp.com/us-en/document/ish_4610088-4610112-16/hpsbgn03726
Vendor Advisory