Privilege escalation in HP Support Assistant

Topic

New Reply

https://support.hp.com/us-en/document/ish_6788123-6788147-16/hpsbhf03809

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

CVE-2022-38395

Resolution
HP strives to address all security issues with HP Support Assistant at best possible speed and make the latest version available with the fixes. HP recommends that customers update to the latest version of HP Support Assistant that includes fixes to above listed issues by turning on automatic updates in the HP Support Assistant settings. If the system has HP Support Assistant version 8x, HP advises that customers to upgrade to HP Support Assistant version 9 by going to the About section and checking for updates. If the system has HP Support Assistant version 9, HP recommends keeping Microsoft Store updates turned on so that the application is always kept up to date.

Alternately, customers can also get the latest version at https://www.hp.com/go/hpsupportassistant.

HP recommends keeping your system up to date with the latest firmware and software.

Affected products
Identify the following affected products.

HP Support Assistant versions earlier than 9.11.

Fusion versions earlier than 1.38.2601.0…

Reply | Quote

Replies

Alex5723 wrote:

Alternately, customers can also get the latest version at https://www.hp.com/go/hpsupportassistant.

Not found for me. Can anyone reach it?

Reply | Quote

b wrote:

Alex5723 wrote:

Alternately, customers can also get the latest version at https://www.hp.com/go/hpsupportassistant.

Not found for me. Can anyone reach it?

Try https://support.hp.com/us-en/help/hp-support-assistant

2 users thanked author for this post.

Just another Forum Poster, b

Reply | Quote

So HP support can’t get the links in their documents to their products right.

Gheez

1 user thanked author for this post.

Alex5723

Reply | Quote

If your HP computer is out of warranty and there are no updates forthcoming because the company decides to end all support, it is better to remove Support Assistant; One less worry or thing to keep and Windows can by a small amount boot faster than before.

Reply | Quote

I have HP Support Assistant v 9.20.22.0 and update settings are turned on.  Since Microsoft Store always seems to be down, I decided to check today. Yep.  Still down.  Don’t know what the problem with Microsoft Store is but that “Something went wrong box” pops up every time I go there.

I am not signed in to Windows 10 with my Microsoft Account.  I use a local account.  But it does not request I sign in, it just says “Something went wrong.” Have no idea why.  Never says what is wrong.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

Sign in with your Microsoft account.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

mpw

Reply | Quote

Signed in with Chrome.  I did not want to sign in to Windows 10 with my Microsoft Account as I was afraid I would not be able to get back to my local account. Had problems in the past with that.

I opened the Microsoft Store from my desktop.  At first, I still got the “something went wrong” message but finally it had me signed in per the profile icon at the top of the page. I chose APP settings from the drop-down menu from the profile icon and the “something went wrong” message popped up, but the APP settings were behind it, so I clicked the box away and the APP settings were functional.

They were already set for automatic update which I think is what they are supposed to be per this discussion.

Thanks.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

mpw wrote:

Don’t know what the problem with Microsoft Store is but that “Something went wrong box” pops up every time I go there.

Try wsreset:

Fix Error 0x80070426 for Microsoft Store and Windows Update

1 user thanked author for this post.

mpw

Reply | Quote

Thank you, I tried that after first trying repair I reset Microsoft Store.  It did not help.

I have since learned that I can only sign in to my Microsoft Account with my Chrome browser.

I cannot sign in to Microsoft Account with Windows 10, Microsoft Store or any Office 2019 apps.

I have started a new thread.  https://www.askwoody.com/forums/topic/i-am-unable-to-sign-in-to-windows-10/

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

yeah had that recently, a descriptive dialogue would be better for everyone.
KISS microsoft it’s already a complete shambles having to use the store to check for extension updates.

Windows - commercial by definition and now function...

Reply | Quote