4.3med
CVE-2007-65131 exploit
HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrar…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.3%
percentile 84%
Public exploits
1
Exploit-DB
Summary
HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.
Exploit prediction (EPSS)
2.32% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.
Exploits and detections
- EDB-30920 HP eSupportDiagnostics 1.0.11 - 'hpediag.dll' ActiveX Control Multiple Information Disclosure Vulnerabilities · remote · 2007-12-20
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
- archives.neohapsis.com /archives/fulldisclosure/2007-12/0470.html · mailing-list, x_refsource_FULLDISC, x_transferred
- securityfocus.com /bid/26967 · vdb-entry, x_refsource_BID, x_transferred
- heise-security.co.uk /news/100934 · x_refsource_MISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/39156 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2007-6513
- NVD: CVE-2007-6513
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.