CVE-2022-48220

Published: Feb 14, 2024Modified: Jun 17, 2026

6.4

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Exploitability: 0.9 / Impact: 5.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.

Affected (27)

Products: Hp: Elite Mini 600 G9 Firmware, Elite Mini 800 G9 Firmware, Elite Sff 600 G9 Firmware, Elite Sff 800 G9 Firmware, Elite Tower 600 G9 Firmware, Elite Tower 680 G9 Firmware, Elite Tower 800 G9 Firmware, Elite Tower 880 G9 Firmware, Elitedesk 800 G8 Desktop Mini Firmware, Elitedesk 800 G8 Small Form Factor Firmware, Elitedesk 800 G8 Tower Firmware, Elitedesk 880 G8 Tower Firmware, Eliteone 800 G8 24 All In One Firmware, Eliteone 800 G8 27 All In One Firmware, Mini Conferencing Pc Firmware, Pro Mini 260 G9 Firmware, Pro Mini 400 G9 Firmware, Pro Sff 400 G9 Firmware, Pro Tower 400 G9 Firmware, Pro Tower 480 G9 Firmware, Z1 G8 Tower Firmware, Z1 G9 Tower Firmware, Z2 Mini G9 Firmware, Z2 Small Form Factor G8 Firmware, Z2 Small Form Factor G9 Firmware, Z2 Tower G8 Firmware, Z2 Tower G9 Firmware

27 products

Elite Mini 600 G9 Firmware

Elite Mini 800 G9 Firmware

Elite Sff 600 G9 Firmware

Elite Sff 800 G9 Firmware

Elite Tower 600 G9 Firmware

Elite Tower 680 G9 Firmware

Elite Tower 800 G9 Firmware

Elite Tower 880 G9 Firmware

Elitedesk 800 G8 Desktop Mini Firmware

Elitedesk 800 G8 Small Form Factor Firmware

Elitedesk 800 G8 Tower Firmware

Elitedesk 880 G8 Tower Firmware

Eliteone 800 G8 24 All In One Firmware

Eliteone 800 G8 27 All In One Firmware

Mini Conferencing Pc Firmware

Pro Mini 260 G9 Firmware

Pro Mini 400 G9 Firmware

Pro Sff 400 G9 Firmware

Pro Tower 400 G9 Firmware

Pro Tower 480 G9 Firmware

Z1 G8 Tower Firmware

Z1 G9 Tower Firmware

Z2 Mini G9 Firmware

Z2 Small Form Factor G8 Firmware

Z2 Small Form Factor G9 Firmware

Z2 Tower G8 Firmware

Z2 Tower G9 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Mini 600 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Mini 600 G9	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Mini 800 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Mini 800 G9	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Sff 600 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Sff 600 G9	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Sff 800 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Sff 800 G9	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Tower 600 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Tower 600 G9	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Tower 680 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Tower 680 G9	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Tower 800 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Tower 800 G9	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elite Tower 880 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Elite Tower 880 G9	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elitedesk 800 G8 Desktop Mini Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Elitedesk 800 G8 Desktop Mini	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elitedesk 800 G8 Small Form Factor Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Elitedesk 800 G8 Small Form Factor	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elitedesk 800 G8 Tower Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Elitedesk 800 G8 Tower	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Elitedesk 880 G8 Tower Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Elitedesk 880 G8 Tower	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Eliteone 800 G8 24 All In One Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Eliteone 800 G8 24 All In One	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Eliteone 800 G8 27 All In One Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Eliteone 800 G8 27 All In One	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Mini Conferencing Pc Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Mini Conferencing Pc With Zoom Rooms	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Pro Mini 260 G9 Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Pro Mini 260 G9	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Pro Mini 400 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Pro Mini 400 G9	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Pro Sff 400 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Pro Sff 400 G9	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Pro Tower 400 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Pro Tower 400 G9	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Pro Tower 480 G9 Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Pro Tower 480 G9	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Z1 G8 Tower Firmware	Before 02.14.00

Running on/with	Platform Versions
Hp Z1 G8 Tower	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Z1 G9 Tower Firmware	Before 02.12.02

Running on/with	Platform Versions
Hp Z1 G9 Tower	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Z2 Mini G9 Firmware	Before 02.02.02

Running on/with	Platform Versions
Hp Z2 Mini G9	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Z2 Small Form Factor G8 Firmware	Before 01.06.05

Running on/with	Platform Versions
Hp Z2 Small Form Factor G8	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Z2 Small Form Factor G9 Firmware	Before 02.02.02

Running on/with	Platform Versions
Hp Z2 Small Form Factor G9	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Z2 Tower G8 Firmware	Before 01.06.05

Running on/with	Platform Versions
Hp Z2 Tower G8	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Z2 Tower G9 Firmware	Before 02.02.02

Running on/with	Platform Versions
Hp Z2 Tower G9	All versions

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (2)

https://support.hp.com/us-en/document/ish_10170895-10170920-16/hpsbhf03907

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/us-en/document/ish_10170895-10170920-16/hpsbhf03907

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.