EUVD-2025-32698Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
Analysis
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
Technical ContextAI
Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized. This vulnerability is classified as Improper Privilege Management (CWE-269).
RemediationAI
Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).
More in Support Assistant
View allHP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors. Rated cri
Local privilege escalation vulnerability in HP Support Assistant versions before 9.44.18.0 that allows a local attacker
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to esc
HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. Rated high severity (CVSS 7.8), this vulnerabilit
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of d
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of d
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today