VULNERABILITY INTELLIGENCE
CVE-2025-13492
CVSS score5.4 MEDIUM
EPSS probability0.09%
CISA KEVNot currently listed
Published2025-12-03
Last modified2026-10-18
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages.
Weakness classification
- CWE-363: Race Condition Enabling Link Following
Primary references
- hp-security-alert@hp.com — Vendor Advisory