Technical impact
HP System Event Utility contains a flaw that permits an attacker with sufficient privileges to perform arbitrary file writes. The ability to overwrite or create files can disrupt the utility’s operation, causing it to stop functioning and effectively denying availability of the service. This issue is categorized as a permission and privilege escalation weakness, mapped to the CWE identifiers controlling write permissions and incorrect permission assignments.
Affected Systems
The vulnerability affects the HP System Event Utility from HP Inc. All released versions prior to 3.2.16 are impacted; the fix is delivered in version 3.2.16 and later releases.
Risk and Exploitability
The assessed CVSS score of 5.2 reflects moderate risk, and the EPSS indicates an exploitation probability of less than 1 %. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that an attacker must be able to execute code with elevated privileges on the system to achieve arbitrary file writes, suggesting a local or privilege‑escalated attack vector rather than remote exploitation. Given the low likelihood of widespread exploitation, the overall risk is moderate but should be mitigated promptly.
