6.4

CVE-2022-48220

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Elite Mini 600 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Mini 600 G9 Version-
Hp ≫ Elite Mini 800 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Mini 800 G9 Version-
Hp ≫ Elite Sff 600 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Sff 600 G9 Version-
Hp ≫ Elite Sff 800 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Sff 800 G9 Version-
Hp ≫ Elite Tower 600 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Tower 600 G9 Version-
Hp ≫ Elite Tower 680 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Tower 680 G9 Version-
Hp ≫ Elite Tower 800 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Tower 800 G9 Version-
Hp ≫ Elite Tower 880 G9 Firmware Version < 02.12.02
   Hp ≫ Elite Tower 880 G9 Version-
Hp ≫ Elitedesk 800 G8 Tower Firmware Version < 02.14.00
   Hp ≫ Elitedesk 800 G8 Tower Version-
Hp ≫ Elitedesk 880 G8 Tower Firmware Version < 02.14.00
   Hp ≫ Elitedesk 880 G8 Tower Version-
Hp ≫ Mini Conferencing Pc Firmware Version < 02.12.02
Hp ≫ Pro Mini 260 G9 Firmware Version < 02.14.00
   Hp ≫ Pro Mini 260 G9 Version-
Hp ≫ Pro Mini 400 G9 Firmware Version < 02.12.02
   Hp ≫ Pro Mini 400 G9 Version-
Hp ≫ Pro Sff 400 G9 Firmware Version < 02.12.02
   Hp ≫ Pro Sff 400 G9 Version-
Hp ≫ Pro Tower 400 G9 Firmware Version < 02.12.02
   Hp ≫ Pro Tower 400 G9 Version-
Hp ≫ Pro Tower 480 G9 Firmware Version < 02.12.02
   Hp ≫ Pro Tower 480 G9 Version-
Hp ≫ Z1 G8 Tower Firmware Version < 02.14.00
   Hp ≫ Z1 G8 Tower Version-
Hp ≫ Z1 G9 Tower Firmware Version < 02.12.02
   Hp ≫ Z1 G9 Tower Version-
Hp ≫ Z2 Mini G9 Firmware Version < 02.02.02
   Hp ≫ Z2 Mini G9 Version-
Hp ≫ Z2 Small Form Factor G8 Firmware Version < 01.06.05
   Hp ≫ Z2 Small Form Factor G8 Version-
Hp ≫ Z2 Small Form Factor G9 Firmware Version < 02.02.02
   Hp ≫ Z2 Small Form Factor G9 Version-
Hp ≫ Z2 Tower G8 Firmware Version < 01.06.05
   Hp ≫ Z2 Tower G8 Version-
Hp ≫ Z2 Tower G9 Firmware Version < 02.02.02
   Hp ≫ Z2 Tower G9 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.356
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.4 0.9 5.5
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.