Categories: News

HP Support Assistant Flaws May Expose PCs to Hackers

I must admit that I’m not personally a fan of ‘mainstream’ PC/laptop suppliers. Not necessarily because I have a problem with their quality, but because they often come packed with at least half-a-dozen pre-installed applications that I’d politely describe as bloatware. Of these, HP users will undoubtedly be aware of their ‘Support Assistant’ and, in a report via TechRadar, a security research group has found vulnerabilities within it that they believe may allow hackers to access the user’s PC.

HP Support Assistant Security Flaws!

Being discovered by security researcher Bill Demirkapi, he has found ‘several’ unpatched vulnerabilities within the HP Support Assistant app. He has (entirely understandably) not disclosed what they are. It is believed, however, that the security flaws could allow for the remote execution of files which could allow user privilege to be altered. A factor that could potentially permit malware files to be executed without the user noticing. This is, we should add, an issue specific to Windows users. Albeit, it was not disclosed if this was flaw was appertaining to certain operating systems. We would, however, presume that the main reference is towards Windows 10.

In the report, Bill Demirkapi has said:

“It is important to note that because HP has not patched three local privilege escalation vulnerabilities. Even if you have the latest version of the software, you are still vulnerable unless you completely remove the agent [the software] from your machine.”

What Should I Do?

Given that at least 3 of these security notices have not been corrected in the most recent (March) update to HP Support Assistant, it has been strongly advised (not by HP incidentally) that users immediately uninstall the software. Well, at least until the next official update comes out! Even then though, there’s no guarantee that these 3 specific issues will be corrected.

Incidentally, don’t think that you Dell or Lenovo owners have dodged a bullet here either. While not specifically citing any particular instances, Bill Demirkap has suggested that similar flaws may exist on their pre-installed ‘help’ applications as well. So, maybe you should double-check to see what came with your PC/laptop. Better safe than sorry, right?…

What do you think? Do you have HP Support Assistant installed on your system? Will you be removing it over these concerns? What’s your opinion on these ‘bloatware’ style of applications? – Let us know in the comments!

Mike Sanders

Disqus Comments Loading...

Recent Posts

be quiet! Pure Rock 2 CPU Cooler Review

If you're in the market for a new CPU cooler and place a high value…

35 mins ago

Hideo Kojima – ‘Death Stranding Was a Success!’

It's been just over 6 months now since Death Stranding was released for the PS4…

9 hours ago

CD Projekt Red Confirms Cyberpunk 2077 is in the Home Stretch

It's certainly been a very long time in coming, but all going well, Cyberpunk 2077…

9 hours ago

Sony Talks About PS5 Backwards Compatibility (And It’s Not Good)

With both the Xbox Series X and PS5 expected to release around November this year,…

1 day ago

Doom II Mod Turns Punch-Out into First Person Mode!

Of all the modding communities there are out there, and there is a lot of…

1 day ago

Hideo Kojima Denies Silent Hill/MGS IP Acquisition Rumors

There have been rumors for a few months now that Sony and Hideo Kojima were…

1 day ago