Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2020-6920: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6920 · published 4 years ago
Summary
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
What to do
- Update hp support_assistant to version 9.11 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| hp | support_assistant |
< 9.11 cpe:2.3:a:hp:support_assistant:*:*:*:*:*:*:*:* |
| – | hp support assistant | before 9.11 |
Original advisory text
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
References
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022... Third Party Advisory
- https://support.hp.com/us-en/document/ish_5585999-5586023-16 Patch Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Timeline
Published16 Feb 2022
Updated3 Nov 2026
First seen29 Sep 2026
Track software like this
Free during beta