High severity · published Feb 1, 2023
CVE-2022-23454
Potential security vulnerabilities have been identified in HP Support Assistant
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Support Assistant · HP
before 9.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-23454
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-23454
Vendor Advisory
https://support.hp.com/us-en/document/ish_5585999-5586023-16/hpsbgn03762
More from Support Assistant
9.8
CVE-2016-2245
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors
7.8
CVE-2025-10578
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0
7.8
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion
7.8
CVE-2025-43026
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0
7.8
CVE-2022-23455
Potential security vulnerabilities have been identified in HP Support Assistant