CVE-2020-6917

CVE-2020-6917

High · published February 16, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00865 · 58.2th percentile
Published
2022-02-16T22:15Z
Affected products (1)
ProductVersionsFixed in
hp/support_assistant< 9.119.11
References (4)
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md · [email protected]https://support.hp.com/us-en/document/ish_5585999-5586023-16 · [email protected]https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md · af854a3a-2127-422b-91ae-364da2661108https://support.hp.com/us-en/document/ish_5585999-5586023-16 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 16 FEB 16:38Z
    Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support…
    cvelistv5