CVE-2022-48220
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP...
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
- Record
CVE-2022-48220- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-203
- Updated
- 2026-11-02
EUVDEUVD-2022-50929
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
- Record
EUVD-2022-50929- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r78h-8xqv-6cr8
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP...
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
- Record
GHSA-r78h-8xqv-6cr8- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-203
- Updated
- 2026-11-02
NVD
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
- Record
CVE-2022-48220- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-203
- Updated
- 2026-11-02
Affected products
- hp inc. certain hp desktop pc products
- hp elite mini 600 g9 firmware
- hp elite mini 800 g9 firmware
- hp elite sff 600 g9 firmware
- hp elite sff 800 g9 firmware
- hp elite tower 600 g9 firmware
- hp elite tower 680 g9 firmware
- hp elite tower 800 g9 firmware
- hp elite tower 880 g9 desktop pc
- hp elite tower 880 g9 firmware
- hp elitedesk 800 g8 desktop mini firmware
- hp elitedesk 800 g8 small form factor firmware
Show 26 moreShow less
- hp elitedesk 800 g8 tower firmware
- hp elitedesk 880 g8 tower firmware
- hp elitedesk 880 g8 tower pc
- hp eliteone 800 g8 24 all-in-one firmware
- hp eliteone 800 g8 27 all-in-one firmware
- hp eliteone 800 g8 27 all-in-one pc
- hp mini conferencing pc firmware
- hp pro mini 260 g9 firmware
- hp pro mini 400 g9 desktop pc
- hp pro mini 400 g9 firmware
- hp pro sff 400 g9 desktop pc
- hp pro sff 400 g9 firmware
- hp pro tower 400 g9 firmware
- hp pro tower 480 g9 desktop pc
- hp pro tower 480 g9 firmware
- hp z1 g8 tower firmware
- hp z1 g9 tower desktop pc
- hp z1 g9 tower firmware
- hp z2 mini g9 firmware
- hp z2 mini g9 workstation
- hp z2 small form factor g8 firmware
- hp z2 small form factor g9 firmware
- hp z2 small form factor g9 workstation
- hp z2 tower g8 firmware
- hp z2 tower g9 firmware
- hp z2 tower g9 workstation
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-48220 is a medium vulnerability (CVSS 6.4) in Hp Inc. Certain Hp Desktop Pc Products, published February 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. No source names a fixed version.