CVE-2023-5739

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-31 · updated 2026-06-17
Weakness: CWE-269

Description

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege.

Affected products

HP Inc HP Image Assistant: before 5.1.8 — fixed in 5.1.8
HP Inc. HP PC Hardware Diagnostics Windows: before 2.4.0.0 — fixed in 2.4.0.0
HP Thunderbolt Dock G2 Firmware: all versions

How to fix

Upgrade to a fixed version: HP Inc HP Image Assistant 5.1.8; HP Inc. HP PC Hardware Diagnostics Windows 2.4.0.0. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_8128401-8128440-16
https://support.hp.com/us-en/document/ish_8128401-8128440-16

Get alerted when CVE-2023-5739 or the next vulnerability affects your stack