Unrated severityNVD Advisory· Published Nov 18, 2022· Updated Apr 29, 2025

CVE-2022-38395

Description

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

Affected products

Microfocus/Support Assistantllm-fuzzy
HP Inc./HP Support Assistantv5
Range: See HP Security Bulletin reference for affected versions.

Patches

Vulnerability mechanics

References

support.hp.com/us-en/document/ish_6788123-6788147-16/hpsbhf03809mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000