Lucene search

K
cve[email protected]CVE-2021-3437
HistoryDec 12, 2022 - 1:15 p.m.

CVE-2021-3437

2022-12-1213:15:11
web.nvd.nist.gov
36
omen gaming hub
sdk
security vulnerabilities
privilege escalation
denial of service
hp
software updates
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%

Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.

Affected configurations

NVD
Node
hpenvy_te01-0xxxMatch-
OR
hpenvy_te01-1xxxMatch-
OR
hpenvy_te01-2xxxMatch-
OR
hpomen_25l_desktop_pc_gt11-1000iMatch-
OR
hpomen_25l_desktop_pc_gt12-1000iMatch-
OR
hpomen_873-0xxxMatch-
OR
hpomen_880-0xxMatch-
OR
hpomen_880-1xxMatch-
OR
hpomen_880-5xxMatch-
OR
hpomen_desktop_pc_25l_gt11-0xxxaMatch-
OR
hpomen_desktop_pc_25l_gt11-0xxxiMatch-
OR
hpomen_desktop_pc_25l_gt12-0xxxaMatch-
OR
hpomen_desktop_pc_25l_gt12-0xxxiMatch-
OR
hpomen_desktop_pc_30l_gt13-0xxxaMatch-
OR
hpomen_desktop_pc_30l_gt13-0xxxiMatch-
OR
hpomen_desktop_pc_30l_gt13-1xxxiMatch-
OR
hpomen_laptop_15-ce0xxMatch-
OR
hpomen_laptop_15-ce1xxMatch-
OR
hpomen_laptop_15-dc0xxxMatch-
OR
hpomen_laptop_15-dc1xxxMatch-
OR
hpomen_laptop_15-dc2xxxMatch-
OR
hpomen_laptop_15-dg0xxxMatch-
OR
hpomen_laptop_15-dh0xxxMatch-
OR
hpomen_laptop_15-dh1xxxMatch-
OR
hpomen_laptop_15-ek0xxxMatch-
OR
hpomen_laptop_15-ek1xxxMatch-
OR
hpomen_laptop_15-en0xxxMatch-
OR
hpomen_laptop_15-en1xxxMatch-
OR
hpomen_laptop_17-an0xxMatch-
OR
hpomen_laptop_17-an1xxMatch-
OR
hpomen_laptop_17-ap0xxMatch-
OR
hpomen_laptop_17-cb0xxxMatch-
OR
hpomen_laptop_17-cb1xxxMatch-
OR
hpomen_obelisk_875-0xxxMatch-
OR
hpomen_obelisk_875-1xxxMatch-
OR
hpomen_x_900-1xxMatch-
OR
hpomen_x_900-2xxMatch-
OR
hpomen_x_p1000-0xxMatch-
OR
hppavilion_gaming_laptop_15-dk2xxxMatch-
OR
hppavilion_gaming_laptop_15-ec2xxxMatch-
OR
hppavilion_gaming_laptop_16-a0xxxMatch-
OR
hppavilion_gaming_tg01-0xxxaMatch-
OR
hppavilion_gaming_tg01-0xxxiMatch-
OR
hppavilion_gaming_tg01-1xxxaMatch-
OR
hppavilion_gaming_tg01-1xxxiMatch-
OR
hppavilion_gaming_tg01-2xxxMatch-
OR
hppavilion_tp01-0xxxMatch-
OR
hppavilion_tp01-1xxxMatch-
AND
hpomen_gaming_hubRange<11.6.3.0
OR
hpomen_gaming_hub_sdkRange<1.0.44

CNA Affected

[
  {
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ],
    "product": "OMEN Gaming Hub SDK",
    "vendor": "HP Inc."
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%