Incorrect default permissions in Hewlett Packard Enterprise OMEN Gaming Hub SDK
Priority HIGH 65CWE-276Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.15551 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hewlett Packard Enterprise | OMEN Gaming Hub SDK | See HP Security Bulletin reference for affected versions. | — | No fix listed | CNA |
- OMEN Gaming Hub SDK VendorHewlett Packard Enterprise Affected See HP Security Bulletin reference for affected versions. Fixed in — No fix listed CNA
CPE configurations NVD · 50
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hp:omen_gaming_hub:*:*:*:*:*:*:*:* | before 11.6.3.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:omen_gaming_hub_sdk:*:*:*:*:*:*:*:* | before 1.0.44 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:envy_te01-0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:envy_te01-1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:envy_te01-2xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_25l_desktop_pc_gt11-1000i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_25l_desktop_pc_gt12-1000i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_873-0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_880-0xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_880-1xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
- cpe:2.3:a:hp:omen_gaming_hub:*:*:*:*:*:*:*:* Versions before 11.6.3.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:omen_gaming_hub_sdk:*:*:*:*:*:*:*:* Versions before 1.0.44 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:envy_te01-0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:envy_te01-1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:envy_te01-2xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_25l_desktop_pc_gt11-1000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_25l_desktop_pc_gt12-1000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_873-0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_880-0xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_880-1xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
Show 40 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:hp:omen_880-5xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-1xxxi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-ce0xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-ce1xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-dc0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-dc1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-dc2xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-dg0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-dh0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-dh1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-ek0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-ek1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-en0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_15-en1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_17-an0xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_17-an1xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_17-ap0xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_17-cb0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_laptop_17-cb1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_obelisk_875-0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_obelisk_875-1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_x_900-1xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_x_900-2xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:omen_x_p1000-0xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_laptop_15-dk2xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_laptop_15-ec2xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_laptop_16-a0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_gaming_tg01-2xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_tp01-0xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:pavilion_tp01-1xxx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
- cpe:2.3:h:hp:omen_880-5xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_desktop_pc_25l_gt11-0xxxi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_desktop_pc_25l_gt12-0xxxi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-0xxxi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_desktop_pc_30l_gt13-1xxxi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-ce0xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-ce1xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-dc0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-dc1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-dc2xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-dg0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-dh0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-dh1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-ek0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-ek1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-en0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_15-en1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_17-an0xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_17-an1xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_17-ap0xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_17-cb0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_laptop_17-cb1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_obelisk_875-0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_obelisk_875-1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_x_900-1xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_x_900-2xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:omen_x_p1000-0xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_laptop_15-dk2xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_laptop_15-ec2xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_laptop_16-a0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_tg01-0xxxi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_tg01-1xxxi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_gaming_tg01-2xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_tp01-0xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:pavilion_tp01-1xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-3437
- 2026-10-03 Alias added: GHSA-g82h-g9mh-6vhp
References
More Hewlett Packard Enterprise Omen Gaming Hub vulnerabilities
- TI-2021-02828 Improper privilege management in Hewlett Packard Enterprise OMEN Gaming Hub and HP… CVSS 3.1CRITICAL 9.8
- TI-2025-10566 HP System Event Utility and Omen Gaming Hub – Potential Arbitrary Code Execution CVSS 4.0MEDIUM 4.8
Sources
- CVE-2021-3437 · CVE Program
- CVE-2021-3437 · NVD
- FIRST EPSS
- GHSA-g82h-g9mh-6vhp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences