CVE-2007-6513

medium HPE
CVSS v3 Base Score
4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS Score
8.5%
Exploitation probability in 30 days
Top 8% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
None
Availability
None
Published: December 21, 2007 (6718 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.

CWE

CWE-200

Affected Products

hp esupportdiagnostics

References

🔗 archives.neohapsis.com 🔗 www.heise-security.co.uk 🔗 www.securityfocus.com 🔗 exchange.xforce.ibmcloud.com 🔗 archives.neohapsis.com