Lucene search

HpCVE-2023-32673

HistoryJun 12, 2023 - 10:15 p.m.

CVE-2023-32673

2023-06-1222:15:10

web.nvd.nist.gov

hardware

diagnostics

windows

image assistant

thunderbolt dock

g2 firmware

vulnerability

elevation of privilege

cve-2023-32673

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

54.4%

JSON

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege.

Affected configurations

Nvd

Node

hpimage_assistantRange<5.1.8

hppc_hardware_diagnosticsRange<2.2.0.0windows

Node

hpthunderbolt_dock_g2_firmwareMatch-

AND

hpthunderbolt_dock_g2Match-

VendorProductVersionCPE
hpimage_assistant*cpe:2.3:a:hp:image_assistant:*:*:*:*:*:*:*:*
hppc_hardware_diagnostics*cpe:2.3:a:hp:pc_hardware_diagnostics:*:*:*:*:*:windows:*:*
hpthunderbolt_dock_g2_firmware-cpe:2.3:o:hp:thunderbolt_dock_g2_firmware:-:*:*:*:*:*:*:*
hpthunderbolt_dock_g2-cpe:2.3:h:hp:thunderbolt_dock_g2:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	image_assistant	*	cpe:2.3:a:hp:image_assistant::::::::
hp	pc_hardware_diagnostics	*	cpe:2.3:a:hp:pc_hardware_diagnostics::::::windows::*
hp	thunderbolt_dock_g2_firmware	-	cpe:2.3:o:hp:thunderbolt_dock_g2_firmware:-:::::::*
hp	thunderbolt_dock_g2	-	cpe:2.3:h:hp:thunderbolt_dock_g2:-:::::::*

CNA Affected

[
  {
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ],
    "product": "HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware",
    "vendor": "HP Inc."
  }
]

References

support.hp.com/us-en/document/ish_8128401-8128440-16/hspbhf03848

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

54.4%

JSON

Related for CVE-2023-32673