Vulnerability · Published Feb 14, 2024 · Assigned by hp
CVE-2022-48220
Medium 6.4
In plain English
A medium-severity security flaw in Certain HP Desktop PC products from HP Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.3%top 79.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HP Inc. | Certain HP Desktop PC products | See HP Security Bulletin reference for affected versions. |
Weakness: CWE-203 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L