CVE-2023-4499: High severity hp thinupdate vulnerability
Published Oct 13, 2023
·Updated
A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability.
Affected Software
40 affected components
All of the following
HP ThinUpdate<2.7.15
Any of the following
HP Elite Mt645
HP Mt21
HP Mt22
HP Mt31
HP Mt32
HP Mt43
HP Mt44
HP Mt45
HP Mt46
HP Pro Mt440 G3
HP T430
HP T530
HP T540
HP T628
HP T630
HP T638
HP T640
HP T730
HP T740
HP ThinUpdate<2.7.15
HP Elite Mt645
HP Mt21
HP Mt22
HP Mt31
HP Mt32
HP Mt43
HP Mt44
HP Mt45
HP Mt46
HP Pro Mt440 G3
HP T430
HP T530
HP T540
HP T628
HP T630
HP T638
HP T640
HP T730
HP T740
Remediation
Patch Available
Event History
Oct 13, 2023
CVE Published
via MITRE·04:24 PM
Data Sourced
via MITRE·04:24 PM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability identified in HP ThinUpdate utility (CVE-2023-4499)?
The vulnerability identified in HP ThinUpdate utility (CVE-2023-4499) is a potential security vulnerability that may lead to information disclosure.
2
What is the severity of CVE-2023-4499?
The severity of CVE-2023-4499 is high with a CVSS score of 7.5.
3
Which versions of HP ThinUpdate are affected by CVE-2023-4499?
HP ThinUpdate version up to and exclusive of 2.7.15 are affected by CVE-2023-4499.
4
Is HP ThinUpdate the only affected software by CVE-2023-4499?
Yes, HP ThinUpdate is the only affected software by CVE-2023-4499.
5
How can I mitigate the potential vulnerability in HP ThinUpdate (CVE-2023-4499)?
To mitigate the potential vulnerability in HP ThinUpdate (CVE-2023-4499), install the provided mitigation released by HP.