CVE-2022-38395

ALTO 7.8CVE-2022-38395 · Published 12/12/2022 · updated 17/06/2026

Em resumo

CVE-2022-38395 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta fusion (hp), support assistant (hp).
Chance de exploração nos próximos 30 dias (EPSS): 2.8%, maior que 86.4% das vulnerabilidades.
Correção: atualize para 1.38.2601.0, 9.11 ou posterior.

Package	Affected versions	Patched versions
fusion hp	`< 1.38.2601.0`	`1.38.2601.0`
support assistant hp	`< 9.11`	`9.11`

Description

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

References

support.hp.com/us-en/document/ish_6788123-6788147-16/hpsbhf03809 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free