VulnerabilityDeferred

CVE-2024-8733

A potential security vulnerability has been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege.

HIGH 8.0EPSS 0.17%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.17%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A potential security vulnerability has been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege. HP is releasing software updates to mitigate this potential vulnerability.

CVSS 3.1: 8.0 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
EPSS: 0.17% probability · 6th percentile
CISA KEV: Not listed
Weakness: CWE-426
Source: hp-security-alert@hp.com

References

https://support.hp.com/us-en/document/ish_11270215-11270239-16

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.