Researchers at SentinelLabs have discovered a high severity flaw in an HP OMEN driver – a popular gaming system – which affects millions of gaming devices and users worldwide.
HP Omen Gaming Hub is a software product that comes preinstalled on all HP OMEN desktops and laptops and can be downloaded from the Microsoft Store to any Windows 10 computer that uses peripheral accessories sold under the OMEN brand. This software can be used to control and optimize settings such as device GPU, fan speeds, CPU overclocking, memory, and more. The same software is used to set and adjust lighting and other controls on gaming devices and accessories such as mouse and keyboards. Attackers could exploit vulnerabilities to locally escalate to kernel-mode privileges. With this level of access, attackers can disable and bypass security products, overwrite system components, corrupt the OS, or perform any malicious operations unimpeded.