PT-2024-21909 · Hewlett Packard · Hp Hotkey Support

Published 2024-10-07 · Updated 2024-10-07 · CVE-2024-27458

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP Hotkey Support (affected versions not specified)

Description A potential security issue has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. This could let someone gain higher access rights on the computer. HP is releasing mitigation for the potential issue.

Recommendations Update HP Hotkey Support to mitigate the risk of exploitation, especially for customers using HP Programmable Key. As a temporary workaround, consider restricting access to the HP Hotkey Support software until a patch is available. Avoid using the HP Hotkey Support software with elevated privileges until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2024-27458

Affected Products

Hp Hotkey Support

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-27458 · Security Note
• https://t.me/cvedetector/7252 · Telegram Post
• https://t.me/latest_high_impact_cve/1285 · Telegram Post
• https://twitter.com/CveFindCom/status/1843335853189251397 · Twitter Post
• https://twitter.com/oktsec/status/1843375278682222656 · Twitter Post
• https://twitter.com/CVEnew/status/1843334165934329938 · Twitter Post
• https://support.hp.com/us-en/document/ish_11342101-11342130-16/hpsbhf03977 · Note
• https://twitter.com/VulmonFeeds/status/1843361435516014773 · Twitter Post