Multiple Vulnerabilities in HP Device Manager (CVE-2020-6925, CVE-2020-6926, CVE-2020-6927)

Late last month, HP published a security bulletin detailing three vulnerabilities in HP Device Manager, a software solution used to manage HP Thin Clients remotely. Nick Bloor, a security researcher, is credited with discovering all three vulnerabilities. Bloor published a Twitter thread on September 29, providing mitigations to address the vulnerabilities. He also published a blog post detailing his findings on October 5.

Bloor discovered a backdoor database user account in HP Device Manager that was protected by a weak password. With this knowledge, he was able to chain multiple vulnerabilities together to gain remote command execution as SYSTEM through HP Device Manager.

For more information about the vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.