CVE-2020-6917
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
Risk Assessment
These vulnerabilities may allow integrity compromise or unauthorized communication with untrusted clients, potentially leading to system compromise.
Recommendation
Update HP Support Assistant to the latest version provided by the vendor to address the identified vulnerabilities.
Other vulnerabilities in HP Support Assistant
See all- CVE-2016-2245Critical
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
- CVE-2026-19915High
Potential vulnerability in HP Support Assistant prior to version 9.55.10.0. Insufficient access controls could allow a local attacker to escalate privileges.
- CVE-2026-15431High
A potential security vulnerability in HP Support Assistant for versions prior to 9.53.2.0 could allow a local attacker to escalate privileges due to insufficient access controls.
- CVE-2025-10578High
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
- CVE-2020-6922High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6921High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6920Medium
Potential security vulnerabilities including compromise of integrity and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6919High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6918High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2022-23456Medium
A potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software. The vulnerability could be exploited by an attacker to delete files on the victim's system.
Original NVD description (English source)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

