Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

HP Touchpoint Analytics Service may grant admin rights

CVE-2025-1697 · published 1 year ago
Summary

The Touchpoint Analytics Service that runs on some HP PCs before version 4.2.2439 could let someone who already has limited access on the computer raise their privileges to an administrator level. This could let a local attacker take control of more system functions. HP has released updates that fix the issue; applying the latest software updates will resolve the risk.

What to do
  • Update hp touchpoint_analytics_service to version 4.2.2439 or later.
Affected software
VendorProductAffected versions
hp touchpoint_analytics_service < 4.2.2439
cpe:2.3:a:hp:touchpoint_analytics_service:*:*:*:*:*:*:*:*
hp, inc. hp touchpoint analytics service See HP security bulletin reference for affected versions
Original advisory text
HP Touchpoint Analytics Service – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential vulnerability.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
6.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-59Link Following
Timeline
Published18 Apr 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-1697 · NVD
CVE-2025-1697 · MITRE
Track software like this
Free during beta