CVE-2018-5926 Security feature bypass in HP Remote Graphics Software
Attackers can bypass certificate authentication in HP Remote Graphics Software, potentially allowing unauthorized access to remote sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-5926?
CVE-2018-5926 is a critical vulnerability in HP Remote Graphics Software, published on 27 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier.
Weakness: CWE-295
Which versions are affected by CVE-2018-5926?
It affects 1 product.
Products include Hp Remote Graphics Software.
How do I fix CVE-2018-5926?
No fix has been published for CVE-2018-5926 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-5926 being exploited?
There is no known exploitation of CVE-2018-5926 in the wild and no public exploit code.
Other vulnerabilities in HP Remote Graphics Software
Sources
Also known as GHSA-2pqv-gjx5-j94f.