CVE-2022-23456
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software. The vulnerability could be exploited by an attacker to delete files on the victim's system.
Risk Assessment
An attacker could delete arbitrary files on the system, potentially leading to data loss or system instability. The risk affects organizations using HP Support Assistant on workstations.
Recommendation
Update HP Support Assistant to the latest version containing the security fix. Restrict user privileges to the minimum necessary.
Other vulnerabilities in HP Support Assistant
See all- CVE-2016-2245Critical
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
- CVE-2026-19915High
Potential vulnerability in HP Support Assistant prior to version 9.55.10.0. Insufficient access controls could allow a local attacker to escalate privileges.
- CVE-2026-15431High
A potential security vulnerability in HP Support Assistant for versions prior to 9.53.2.0 could allow a local attacker to escalate privileges due to insufficient access controls.
- CVE-2025-10578High
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
- CVE-2020-6922High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6921High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6920Medium
Potential security vulnerabilities including compromise of integrity and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6919High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6918High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6917High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
Original NVD description (English source)
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS