6.4

CVE-2022-48220

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
HpElite Mini 600 G9 Firmware Version < 02.12.02
   HpElite Mini 600 G9 Version-
HpElite Mini 800 G9 Firmware Version < 02.12.02
   HpElite Mini 800 G9 Version-
HpElite Sff 600 G9 Firmware Version < 02.12.02
   HpElite Sff 600 G9 Version-
HpElite Sff 800 G9 Firmware Version < 02.12.02
   HpElite Sff 800 G9 Version-
HpElite Tower 600 G9 Firmware Version < 02.12.02
   HpElite Tower 600 G9 Version-
HpElite Tower 680 G9 Firmware Version < 02.12.02
   HpElite Tower 680 G9 Version-
HpElite Tower 800 G9 Firmware Version < 02.12.02
   HpElite Tower 800 G9 Version-
HpElite Tower 880 G9 Firmware Version < 02.12.02
   HpElite Tower 880 G9 Version-
HpElitedesk 800 G8 Tower Firmware Version < 02.14.00
   HpElitedesk 800 G8 Tower Version-
HpElitedesk 880 G8 Tower Firmware Version < 02.14.00
   HpElitedesk 880 G8 Tower Version-
HpMini Conferencing Pc Firmware Version < 02.12.02
HpPro Mini 260 G9 Firmware Version < 02.14.00
   HpPro Mini 260 G9 Version-
HpPro Mini 400 G9 Firmware Version < 02.12.02
   HpPro Mini 400 G9 Version-
HpPro Sff 400 G9 Firmware Version < 02.12.02
   HpPro Sff 400 G9 Version-
HpPro Tower 400 G9 Firmware Version < 02.12.02
   HpPro Tower 400 G9 Version-
HpPro Tower 480 G9 Firmware Version < 02.12.02
   HpPro Tower 480 G9 Version-
HpZ1 G8 Tower Firmware Version < 02.14.00
   HpZ1 G8 Tower Version-
HpZ1 G9 Tower Firmware Version < 02.12.02
   HpZ1 G9 Tower Version-
HpZ2 Mini G9 Firmware Version < 02.02.02
   HpZ2 Mini G9 Version-
HpZ2 Small Form Factor G8 Firmware Version < 01.06.05
   HpZ2 Small Form Factor G8 Version-
HpZ2 Small Form Factor G9 Firmware Version < 02.02.02
   HpZ2 Small Form Factor G9 Version-
HpZ2 Tower G8 Firmware Version < 01.06.05
   HpZ2 Tower G8 Version-
HpZ2 Tower G9 Firmware Version < 02.02.02
   HpZ2 Tower G9 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.356
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.4 0.9 5.5
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.