CVE-2022-48220: Medium severity HP Desktop PC vulnerability
Published Feb 14, 2024
·Updated
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
Affected Software
55 affected components
HP Desktop PC
All of the following
HP Elite Mini 600 G9 Firmware<02.12.02
HP Elite Mini 600 G9
All of the following
HP Elite Mini 800 G9 Firmware<02.12.02
HP Elite Mini 800 G9
All of the following
HP Elite Sff 600 G9 Firmware<02.12.02
HP Elite Sff 600 G9
All of the following
HP Elite Sff 800 G9 Firmware<02.12.02
HP Elite Sff 800 G9
All of the following
HP Elite Tower 600 G9 Firmware<02.12.02
HP Elite Tower 600 G9
All of the following
HP Elite Tower 680 G9 Firmware<02.12.02
HP Elite Tower 680 G9
All of the following
HP Elite Tower 800 G9 Firmware<02.12.02
HP Elite Tower 800 G9
All of the following
HP Elite Tower 880 G9 Firmware<02.12.02
HP Elite Tower 880 G9
All of the following
HP Elitedesk 800 G8 Desktop Mini Firmware<02.14.00
HP Elitedesk 800 G8 Desktop Mini
All of the following
HP Elitedesk 800 G8 Small Form Factor Firmware<02.14.00
HP Elitedesk 800 G8 Small Form Factor
All of the following
HP Elitedesk 800 G8 Tower Firmware<02.14.00
HP Elitedesk 800 G8 Tower
All of the following
HP Elitedesk 880 G8 Tower Firmware<02.14.00
HP Elitedesk 880 G8 Tower
All of the following
HP Eliteone 800 G8 24 All-in-one Firmware<02.14.00
HP Eliteone 800 G8 24 All-in-one
All of the following
HP Eliteone 800 G8 27 All-in-one Firmware<02.14.00
HP Eliteone 800 G8 27 All-in-one
All of the following
HP Mini Conferencing Pc Firmware<02.12.02
HP Mini Conferencing Pc With Zoom Rooms
All of the following
HP Pro Mini 260 G9 Firmware<02.14.00
HP Pro Mini 260 G9
All of the following
HP Pro Mini 400 G9 Firmware<02.12.02
HP Pro Mini 400 G9
All of the following
HP Pro Sff 400 G9 Firmware<02.12.02
HP Pro Sff 400 G9
All of the following
HP Pro Tower 400 G9 Firmware<02.12.02
HP Pro Tower 400 G9
All of the following
HP Pro Tower 480 G9 Firmware<02.12.02
HP Pro Tower 480 G9
All of the following
HP Z1 G8 Tower Firmware<02.14.00
HP Z1 G8 Tower
All of the following
HP Z1 G9 Tower Firmware<02.12.02
HP Z1 G9 Tower
All of the following
HP Z2 Mini G9 Firmware<02.02.02
HP Z2 Mini G9
All of the following
HP Z2 Small Form Factor G8 Firmware<01.06.05
HP Z2 Small Form Factor G8
All of the following
HP Z2 Small Form Factor G9 Firmware<02.02.02
HP Z2 Small Form Factor G9
All of the following
HP Z2 Tower G8 Firmware<01.06.05
HP Z2 Tower G8
All of the following
HP Z2 Tower G9 Firmware<02.02.02
HP Z2 Tower G9
Event History
Feb 14, 2024
CVE Published
via MITRE·10:21 PM
Data Sourced
via MITRE·10:21 PM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-48220?
The severity of CVE-2022-48220 is considered low, as it requires physical access to exploit.
2
How do I fix CVE-2022-48220?
To fix CVE-2022-48220, users should update to the latest firmware released by HP.
3
Who is affected by CVE-2022-48220?
CVE-2022-48220 affects certain HP Desktop PC products utilizing the HP TamperLock feature.
4
What kind of attack does CVE-2022-48220 allow?
CVE-2022-48220 may allow intrusion detection bypass via a physical attack.
5
What should I do if I cannot update my firmware for CVE-2022-48220?
If firmware cannot be updated for CVE-2022-48220, consider disconnecting the device from sensitive networks until a solution is implemented.