Hewlett-Packard laptop owners warned of security threat

Users of Hewlett-Packard laptops are being warned that software bundled with their machines could open them up to hackers.

The US Computer Emergency Readiness Team (US-CERT) says there is a security vulnerability in the HP Info Center Software, with a public exploit already circulating in hacking circles.

Download this free guide

How to improve your cyber security with security analytics

Download this e-guide to read how many firms are looking to security analytics to keep abreast of the ever-evolving world of cyber threats. With traditional approaches to cyber security proving less effective against increasingly sophisticated and automated cyber-attacks, security analytics may well be your knight in shining armour.

Start Download

• Corporate E-mail Address:

  You forgot to provide an Email Address.

  This email address doesn’t appear to be valid.

  This email address is already registered. Please login.

  You have exceeded the maximum character limit.

  Please provide a Corporate E-mail Address.

• • I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.

  Please check the box if you want to proceed.

• • I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.

  Please check the box if you want to proceed.

By submitting my Email address I confirm that I have read and accepted the Terms of Use and Declaration of Consent.

"US-CERT is aware of public reports stating that the HP Info Center Software, which allows one-touch access to features on HP laptops, may contain a vulnerability," said US-CERT in an advisory.

"This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands or to view or alter the system registry on affected systems," it said.

To help mitigate the security risk, US-CERT recommends that users and administrators disable ActiveX controls on machines and check the security of their browsers.

US-CERT plans to provide additional information on the HP flaw as it becomes available.