← back
CVE-2025-11531

HP System Event Utility and Omen Gaming Hub – Potential Arbitrary Code Execution

CVSS 4.8 MEDIUMEPSS 0.3%CWE-22
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Dec 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerability was remediated with HP System Event Utility version 3.2.12 and Omen Gaming Hub version 1101.2511.101.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
HP Inc · HP System Event UtilityHP Inc · Omen Gaming Hub

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://support.hp.com/us-en/document/ish_13537533-13537555-16/hpsbgn04079