CVE-2025-11531

published 2025-12-09

CVE-2025-11531: HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerability was…

Priority P3 54 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

HP System Event Utility and Omen Gaming Hub might allow execution of
certain files outside of their restricted paths. This
potential vulnerability was remediated with HP System
Event Utility version 3.2.12 and Omen Gaming Hub version
1101.2511.101.0.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
hp	omen_gaming_hub	< 1101.2511.101.0	1101.2511.101.0
hp	system_event_utility	< 3.2.12	3.2.12
hp_inc	hp_system_event_utility	< 3.2.12	3.2.12
hp_inc	omen_gaming_hub	< 1101.2511.101.0	1101.2511.101.0

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 4.8 MEDIUM CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22