{"id":"CVE-2025-11531","state":"PUBLISHED","title":"HP System Event Utility and Omen Gaming Hub – Potential Arbitrary Code Execution","description":"HP System Event Utility and Omen Gaming Hub might allow execution of \ncertain files outside of their restricted paths. This\n               potential vulnerability was remediated with HP System \nEvent Utility version 3.2.12 and Omen Gaming Hub version \n1101.2511.101.0.","publishedAt":"2025-12-09T18:29:51.181Z","updatedAt":"2025-12-09T19:26:04.775Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"hp"},"assigner":"hp","products":["HP Inc HP System Event Utility","HP Inc Omen Gaming Hub"],"affected":[{"vendor":"HP Inc","product":"HP System Event Utility","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"3.2.12","versionType":"custom"}]},{"vendor":"HP Inc","product":"Omen Gaming Hub","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1101.2511.101.0","versionType":"custom"}]}],"references":["https://support.hp.com/us-en/document/ish_13537533-13537555-16/hpsbgn04079"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/11xxx/CVE-2025-11531.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-11531","state":"PUBLISHED","datePublished":"2025-12-09T18:29:51.181Z","dateUpdated":"2025-12-09T19:26:04.775Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2025-10-08T19:07:15.960Z"},"containers":{"cna":{"title":"HP System Event Utility and Omen Gaming Hub – Potential Arbitrary Code Execution","descriptions":[{"lang":"en","value":"HP System Event Utility and Omen Gaming Hub might allow execution of \ncertain files outside of their restricted paths. This\n               potential vulnerability was remediated with HP System \nEvent Utility version 3.2.12 and Omen Gaming Hub version \n1101.2511.101.0."}],"affected":[{"vendor":"HP Inc","product":"HP System Event Utility","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"3.2.12","versionType":"custom"}]},{"vendor":"HP Inc","product":"Omen Gaming Hub","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1101.2511.101.0","versionType":"custom"}]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_13537533-13537555-16/hpsbgn04079"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":4.8,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2025-12-09T18:29:51.181Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hp_inc:hp_system_event_utility:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.12","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:hp_inc:omen_gaming_hub:*:*:*:*:*:*:*:*","versionEndExcluding":"1101.2511.101.0","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-09T19:25:57.896127Z","id":"CVE-2025-11531","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-09T19:26:04.775Z"}}]}}}