PT-2024-6584 · Hewlett Packard · Hp One Agent

Published 2024-10-02 · Updated 2024-10-07 · CVE-2024-8733

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HP One Agent (affected versions not specified)

Description: A potential security issue has been identified in the HP One Agent software for certain HP PC products, which may allow for escalation of privilege. This issue is related to the use of an untrusted search path. The exploitation of this issue could enable an attacker to launch a local attack and potentially increase their privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

BDU:2024-07730

CVE-2024-8733

Affected Products

Hp One Agent

References · 10

• https://bdu.fstec.ru/vul/2024-07730 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-8733 · Security Note
• https://t.me/cvedetector/6880 · Telegram Post
• https://support.hp.com/us-en/document/ish_11270215-11270239-16/hpsbhf03972 · Note
• https://twitter.com/vuldb/status/1841921177536876697 · Twitter Post
• https://twitter.com/CVEnew/status/1841560212399857946 · Twitter Post
• https://support.hp.com/us-en/document/ish_11270215-11270239-16 · Note
• https://twitter.com/oktsec/status/1841729297091809507 · Twitter Post
• https://twitter.com/cracbot/status/1843169463354757279 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1841613958895038893 · Twitter Post