{"id":"CVE-2007-6513","aliases":["EUVD-2007-6479","GHSA-229w-w68g-gcf2"],"status":"published","title":"HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which...","description":"HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02322,"percentile":0.83567,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200"],"published":"2007-12-21T22:00:00Z","modified":"2026-06-16T22:48:14Z","exploits":[{"source":"exploitdb","id":"EDB-30920","title":"HP eSupportDiagnostics 1.0.11 - 'hpediag.dll' ActiveX Control Multiple Information Disclosure Vulnerabilities","type":"remote","platform":"windows","date":"2007-12-20","verified":true,"url":"https://www.exploit-db.com/exploits/30920"}],"products":[{"vendor":"hp","product":"esupportdiagnostics"}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2007-12/0470.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/26967","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.heise-security.co.uk/news/100934","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39156","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6513"},{"url":"https://github.com/advisories/GHSA-229w-w68g-gcf2"}],"sources":{"cve":[{"id":"CVE-2007-6513","description":"HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.","status":"published","published":"2007-12-21T22:00:00Z","modified":"2024-08-07T16:11:06.013Z","updated_at":"2026-11-02T13:33:07.91528Z"}],"euvd":[{"id":"EUVD-2007-6479","description":"HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.","status":"published","published":"2007-12-21T22:00:00Z","modified":"2024-08-07T16:11:06Z","updated_at":"2026-11-03T01:16:12.278875Z"}],"ghsa":[{"id":"GHSA-229w-w68g-gcf2","title":"HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which...","description":"HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.","status":"published","published":"2022-05-01T18:43:43Z","modified":"2023-01-31T05:05:28Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:48:51.452715Z"}],"nvd":[{"id":"CVE-2007-6513","description":"HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.","status":"published","published":"2007-12-21T22:46:00Z","modified":"2026-06-16T22:48:14.453Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:24.110006Z"}]}}