6.4
CVE-2022-48220
- EPSS 0.15%
- Veröffentlicht 14.02.2024 23:15:08
- Zuletzt bearbeitet 09.01.2026 22:02:53
- Quelle hp-security-alert@hp.com
- CVE-Watchlists
- Unerledigt
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Elite Mini 600 G9 Firmware Version < 02.12.02
Hp ≫ Elite Mini 800 G9 Firmware Version < 02.12.02
Hp ≫ Elite Sff 600 G9 Firmware Version < 02.12.02
Hp ≫ Elite Sff 800 G9 Firmware Version < 02.12.02
Hp ≫ Elite Tower 600 G9 Firmware Version < 02.12.02
Hp ≫ Elite Tower 680 G9 Firmware Version < 02.12.02
Hp ≫ Elite Tower 800 G9 Firmware Version < 02.12.02
Hp ≫ Elite Tower 880 G9 Firmware Version < 02.12.02
Hp ≫ Elitedesk 800 G8 Desktop Mini Firmware Version < 02.14.00
Hp ≫ Elitedesk 800 G8 Small Form Factor Firmware Version < 02.14.00
Hp ≫ Elitedesk 800 G8 Tower Firmware Version < 02.14.00
Hp ≫ Elitedesk 880 G8 Tower Firmware Version < 02.14.00
Hp ≫ Eliteone 800 G8 24 All-in-one Firmware Version < 02.14.00
Hp ≫ Eliteone 800 G8 27 All-in-one Firmware Version < 02.14.00
Hp ≫ Mini Conferencing Pc Firmware Version < 02.12.02
Hp ≫ Pro Mini 260 G9 Firmware Version < 02.14.00
Hp ≫ Pro Mini 400 G9 Firmware Version < 02.12.02
Hp ≫ Pro Sff 400 G9 Firmware Version < 02.12.02
Hp ≫ Pro Tower 400 G9 Firmware Version < 02.12.02
Hp ≫ Pro Tower 480 G9 Firmware Version < 02.12.02
Hp ≫ Z1 G8 Tower Firmware Version < 02.14.00
Hp ≫ Z1 G9 Tower Firmware Version < 02.12.02
Hp ≫ Z2 Mini G9 Firmware Version < 02.02.02
Hp ≫ Z2 Small Form Factor G8 Firmware Version < 01.06.05
Hp ≫ Z2 Small Form Factor G9 Firmware Version < 02.02.02
Hp ≫ Z2 Tower G8 Firmware Version < 01.06.05
Hp ≫ Z2 Tower G9 Firmware Version < 02.02.02
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.356 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.4 | 0.9 | 5.5 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
|
CWE-203 Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.