CVE-2021-3437

Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.hp.com/us-en/document/ish_4610088-4610112-16/hpsbgn03726	Vendor Advisory
https://support.hp.com/us-en/document/ish_4610088-4610112-16/hpsbgn03726	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:hp:omen_gaming_hub::::::::
	cpe:2.3:a:hp:omen_gaming_hub_sdk::::::::

OR	cpe:2.3:h:hp:envy_te01-0xxx:-:::::::*
	cpe:2.3:h:hp:envy_te01-1xxx:-:::::::*
	cpe:2.3:h:hp:envy_te01-2xxx:-:::::::*
	cpe:2.3:h:hp:omen_25l_desktop_pc_gt11-1000i:-:::::::*
	cpe:2.3:h:hp:omen_25l_desktop_pc_gt12-1000i:-:::::::*
	cpe:2.3:h:hp:omen_873-0xxx:-:::::::*
	cpe:2.3:h:hp:omen_880-0xx:-:::::::*
	cpe:2.3:h:hp:omen_880-1xx:-:::::::*
	cpe:2.3:h:hp:omen_880-5xx:-:::::::*
	cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxa:-:::::::*
	cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxi:-:::::::*
	cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxa:-:::::::*
	cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxi:-:::::::*
	cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxa:-:::::::*
	cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxi:-:::::::*
	cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-1xxxi:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-ce0xx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-ce1xx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-dc0xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-dc1xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-dc2xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-dg0xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-dh0xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-dh1xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-ek0xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-ek1xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-en0xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_15-en1xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_17-an0xx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_17-an1xx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_17-ap0xx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_17-cb0xxx:-:::::::*
	cpe:2.3:h:hp:omen_laptop_17-cb1xxx:-:::::::*
	cpe:2.3:h:hp:omen_obelisk_875-0xxx:-:::::::*
	cpe:2.3:h:hp:omen_obelisk_875-1xxx:-:::::::*
	cpe:2.3:h:hp:omen_x_900-1xx:-:::::::*
	cpe:2.3:h:hp:omen_x_900-2xx:-:::::::*
	cpe:2.3:h:hp:omen_x_p1000-0xx:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_laptop_15-dk2xxx:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_laptop_15-ec2xxx:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_laptop_16-a0xxx:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxa:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxi:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxa:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxi:-:::::::*
	cpe:2.3:h:hp:pavilion_gaming_tg01-2xxx:-:::::::*
	cpe:2.3:h:hp:pavilion_tp01-0xxx:-:::::::*
	cpe:2.3:h:hp:pavilion_tp01-1xxx:-:::::::*

History

29 Apr 2025, 05:15

Type	Values Removed	Values Added
CWE		CWE-276

21 Nov 2024, 06:21

Type	Values Removed	Values Added
References	~~() https://support.hp.com/us-en/document/ish_4610088-4610112-16/hpsbgn03726 - Vendor Advisory~~	() https://support.hp.com/us-en/document/ish_4610088-4610112-16/hpsbgn03726 - Vendor Advisory

Information

Published : 2022-12-12 13:15

Updated : 2025-04-29 05:15

NVD link : CVE-2021-3437

Mitre link : CVE-2021-3437

CVE.ORG link : CVE-2021-3437

JSON object : View

Products Affected

omen_desktop_pc_25l_gt11-0xxxi
omen_laptop_15-ek1xxx
pavilion_gaming_laptop_15-ec2xxx
omen_laptop_15-dh0xxx
omen_laptop_15-ek0xxx
omen_obelisk_875-0xxx
omen_880-0xx
pavilion_gaming_tg01-2xxx
omen_laptop_15-ce0xx
omen_desktop_pc_30l_gt13-0xxxi
pavilion_gaming_laptop_15-dk2xxx
omen_laptop_17-an0xx
omen_laptop_17-an1xx
omen_desktop_pc_25l_gt12-0xxxa
pavilion_gaming_tg01-1xxxa
omen_gaming_hub_sdk
omen_laptop_15-dg0xxx
omen_25l_desktop_pc_gt12-1000i
omen_25l_desktop_pc_gt11-1000i
omen_laptop_17-cb1xxx
omen_laptop_15-en0xxx
omen_laptop_15-ce1xx
omen_laptop_15-dh1xxx
omen_x_900-1xx
omen_desktop_pc_30l_gt13-0xxxa
omen_laptop_15-dc1xxx
omen_desktop_pc_25l_gt12-0xxxi
omen_laptop_17-cb0xxx
omen_desktop_pc_25l_gt11-0xxxa
pavilion_gaming_tg01-0xxxi
pavilion_gaming_laptop_16-a0xxx
omen_x_900-2xx
omen_873-0xxx
omen_desktop_pc_30l_gt13-1xxxi
pavilion_gaming_tg01-0xxxa
omen_laptop_15-en1xxx
omen_laptop_17-ap0xx
pavilion_tp01-1xxx
omen_gaming_hub
omen_x_p1000-0xx
envy_te01-1xxx
pavilion_tp01-0xxx
omen_880-5xx
pavilion_gaming_tg01-1xxxi
omen_laptop_15-dc2xxx
envy_te01-0xxx
omen_obelisk_875-1xxx
envy_te01-2xxx
omen_laptop_15-dc0xxx
omen_880-1xx

CWE

NVD-CWE-noinfo CWE-276

Incorrect Default Permissions

{"id": "CVE-2021-3437", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-12-12T13:15:11.630", "references": [{"url": "https://support.hp.com/us-en/document/ish_4610088-4610112-16/hpsbgn03726", "tags": ["Vendor Advisory"], "source": "hp-security-alert@hp.com"}, {"url": "https://support.hp.com/us-en/document/ish_4610088-4610112-16/hpsbgn03726", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities."}, {"lang": "es", "value": "Se han identificado posibles vulnerabilidades de seguridad en un paquete SDK de OMEN Gaming Hub que pueden permitir una escalada de privilegios y/o Denegaci\u00f3n de Servicio (DoS). HP est\u00e1 lanzando actualizaciones de software para mitigar las posibles vulnerabilidades."}], "lastModified": "2025-04-29T05:15:39.240", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:omen_gaming_hub:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A197696-F175-4A11-9A10-6627FC644EF0", "versionEndExcluding": "11.6.3.0"}, {"criteria": "cpe:2.3:a:hp:omen_gaming_hub_sdk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4009502-5FEA-414F-A5A4-4EABADA946E9", "versionEndExcluding": "1.0.44"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp:envy_te01-0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "06EFFCB3-1198-41FF-9C8D-2F5ADA1F64D4"}, {"criteria": "cpe:2.3:h:hp:envy_te01-1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FB5B327E-9FE5-4865-A9FB-47C9FF7D960A"}, {"criteria": "cpe:2.3:h:hp:envy_te01-2xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "92F66B07-1D7B-4728-8263-414013447FA7"}, {"criteria": "cpe:2.3:h:hp:omen_25l_desktop_pc_gt11-1000i:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BAECAC4C-E5DC-411B-89A7-4E5D8A22F95C"}, {"criteria": "cpe:2.3:h:hp:omen_25l_desktop_pc_gt12-1000i:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "60B660BD-3174-4E78-9D7F-A0C3EF1AF348"}, {"criteria": "cpe:2.3:h:hp:omen_873-0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D7123B1-E099-47B2-8D10-1607DCA2D4DD"}, {"criteria": "cpe:2.3:h:hp:omen_880-0xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "90B22B84-BA92-430E-96AC-674FE07CBCB3"}, {"criteria": "cpe:2.3:h:hp:omen_880-1xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A44678B-7D2E-4035-876D-7F2E418EC511"}, {"criteria": "cpe:2.3:h:hp:omen_880-5xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "393EEE3F-C448-4CA6-90DF-3FE07F96006A"}, {"criteria": "cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxa:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "467DD263-21AB-4670-B032-2E099590EB9B"}, {"criteria": "cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D7DE7FE1-F397-4A81-9CDF-0A0D22AC855A"}, {"criteria": "cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxa:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BBED84D9-22E9-4120-9985-B0F2E13755E7"}, {"criteria": "cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "13700D39-E5FF-49CD-8C6D-9D319F5D316D"}, {"criteria": "cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxa:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E0E0F24A-E49E-4834-A16B-D29790E63501"}, {"criteria": "cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FF3CDA56-B59E-4DBF-AA0E-FBB3C70D0563"}, {"criteria": "cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-1xxxi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E3EFE51-E4EB-415F-ABD3-F2E115853E92"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-ce0xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C55C75C3-A346-44A3-9059-35D854A8EE90"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-ce1xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AC27945A-C7D6-462B-8E2A-1D79C4153FDF"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-dc0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "95C3FBF0-2052-4205-8E19-1E95EED2337C"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-dc1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2DCB0C0A-B9DD-4B7C-BC05-EAC52591959A"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-dc2xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2423B600-3D8D-4AD0-B065-F257EE7AD25B"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-dg0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E84C9FA8-C70E-4622-AF97-52A1170157C9"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-dh0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E68C0519-65FB-4B43-84F7-8FD142FCF341"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-dh1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B95A60AA-39E8-4837-B612-AC1540813207"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-ek0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "47A4341C-5DAB-4460-901A-543A387E5A63"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-ek1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "603794C2-FDF6-4441-A0B0-6CA8A8308F5F"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-en0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64A88487-F28F-4658-BEEC-791C532CBED3"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_15-en1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A626AB9-0A44-488E-9AB4-92EF5DD0F3F0"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_17-an0xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FDAE0B44-A8F5-41AD-A141-AB12F019C704"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_17-an1xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "675C221B-8B6A-4D60-A851-D7F9D194070F"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_17-ap0xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B541BA16-BAE7-48BA-9071-3A4AD97CDA4F"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_17-cb0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DAB13653-9500-429F-8CC7-B124C5B7E70C"}, {"criteria": "cpe:2.3:h:hp:omen_laptop_17-cb1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5AD086C6-4FA1-414B-A38C-D2B72AE3A049"}, {"criteria": "cpe:2.3:h:hp:omen_obelisk_875-0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E2318D3A-8E74-477D-BD66-EF9AB73F93F1"}, {"criteria": "cpe:2.3:h:hp:omen_obelisk_875-1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8C8A4586-F91D-4B98-8FF5-3CEAE8A46485"}, {"criteria": "cpe:2.3:h:hp:omen_x_900-1xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11A7A56E-505D-47FD-91BA-A22ACEDFA6D3"}, {"criteria": "cpe:2.3:h:hp:omen_x_900-2xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AA48970E-749D-4D17-A975-B1C580DC51D4"}, {"criteria": "cpe:2.3:h:hp:omen_x_p1000-0xx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD979E57-78C6-4ED1-8335-2CF0AD10A2D4"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_laptop_15-dk2xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED930F5D-614E-4FCA-B550-A93EE3467938"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_laptop_15-ec2xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5B744AA0-2FB9-4F3B-85CB-E9F8563BDBF9"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_laptop_16-a0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "37DBBEEC-548B-4FD5-8E26-5548B7020E71"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxa:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "471B30CC-3BEF-4EAA-93A2-CAB8170396B1"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1B65B28-697B-401B-A207-7B2504393544"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxa:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E4DB74CD-18C3-4C72-913E-D3B4CB015375"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "567F86E4-4AFD-4ED6-ABB2-0DF3262C0674"}, {"criteria": "cpe:2.3:h:hp:pavilion_gaming_tg01-2xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D1C6A162-3E05-419A-AA8A-5BE74BF9537B"}, {"criteria": "cpe:2.3:h:hp:pavilion_tp01-0xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9CB62642-BFEA-48FB-97D3-14A153526E32"}, {"criteria": "cpe:2.3:h:hp:pavilion_tp01-1xxx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "97B897DA-575F-4A4C-AC71-4C953A532363"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "hp-security-alert@hp.com"}

9.8 /10