What is the CVSS score of CVE-2025-13492?

CVE-2025-13492 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Image Assistant are affected by CVE-2025-13492?

HP Image Assistant versions prior to 5.3.3 contain a privilege escalation vulnerability exploitable by local attackers through a race condition during package installation, potentially allowing…. A patch is available.

How to fix or mitigate CVE-2025-13492?

Within 24 hours: Inventory all systems running HP Image Assistant and identify instances below version 5.3.3. Within 7 days: Upgrade all affected HP Image Assistant installations to version 5.3.3 or later. Within 30 days: Verify patch deployment across the environment and confirm no systems remain on vulnerable versions through automated scanning.

Image Assistant CVE-2025-13492

EUVD-2025-200994 HIGH

Race Condition Enabling Link Following (CWE-363)

2025-12-03 hp-security-alert@hp.com

Privilege Escalation Image Assistant

7.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:24 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

5.3.3

EUVD ID Assigned

Mar 15, 2026 - 16:14 euvd

EUVD-2025-200994

Analysis Generated

Mar 15, 2026 - 16:14 vuln.today

CVE Published

Dec 03, 2025 - 17:15 nvd

HIGH 7.0

DescriptionCVE.org

A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages.

Analysis

Technical ContextAI

Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized.

RemediationAI

Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).