HP OMEN Gaming Hub SDK EoP/DoS Vulnerability
CVE-2021-3437 Published on December 12, 2022
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.
Vulnerability Analysis
CVE-2021-3437 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
Products Associated with CVE-2021-3437
stack.watch emails you whenever new vulnerabilities are published in HP Omen Gaming Hub or HP Omen Gaming Hub Sdk. Just hit a watch button to start following.
Affected Versions
HP Inc. OMEN Gaming Hub SDK Version See HP Security Bulletin reference for affected versions. is affected by CVE-2021-3437Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.