High severity · published Oct 7, 2024
CVE-2024-27458
HP Hotkey Support – Escalation of Privilege
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing mitigation for the potential vulnerability. Customers using HP Programmable Key are recommended to update HP Hotkey Support.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HH
HP Hotkey Support · HP, Inc.
See HP Security Bulletin reference for affected versions. · source: vendor
ED
Elite Dragonfly Max Firmware · HP
8.10.42.190 before 8.10.42.190_rev1 · source: CISA