CVE-2022-38395

—

CVSS 3.1

7.8 high

EPSS

3%p86

Published

Dec 12, 2022 (Dec 12, 2022)

Modified

Jun 17, 2026

Description

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

Vendors: hp
Products: fusion, support assistant
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news2 stories

September 2022 Patch Tuesday forecast: No sign of cooling off

Help Net SecuritySep 9, 00:00 UTC · Sep 9, 2022Vulnerability CVE-2022-34713 CVE-2022-32893 CVE-2022-32894+1 CVEs

High-Severity Firmware Security Flaws Left Unpatched in HP Enterprise Devices

The Hacker NewsSep 12, 13:20 UTC · Sep 12, 2022Vulnerability CVE-2022-23930 CVE-2022-31640 CVE-2022-31641+4 CVEs