Skip to content
Fencer Vulns
medium 6.4

CVE-2022-48220 json

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusi…

published 2024-02-14 2 y ago modified 2026-06-17 4 mo ago also EUVD-2022-50929

cvss
6.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 20%
public exploits
0
none known

Summary

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.

Patch / fix

  • hp elite_tower_880_g9_desktop_pc 02.12.02_rev1
  • hp elitedesk_880_g8_tower_pc 02.14.00_rev1
  • hp eliteone_800_g8_27_all-in-one_pc 02.14.00_rev1
  • hp pro_mini_400_g9_desktop_pc 02.12.02_rev1
  • hp pro_sff_400_g9_desktop_pc 02.12.02_rev1
  • hp pro_tower_480_g9_desktop_pc 02.12.02_rev1
  • hp z1_g9_tower_desktop_pc 02.12.02_rev1
  • hp z2_small_form_factor_g9_workstation 01.06.05_rev1
  • hp z2_mini_g9_workstation 2.02.02_rev1
  • hp z2_tower_g9_workstation 2.02.02_rev1

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.28% chance of exploitation in the next 30 days, higher than 20% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 6.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CNA 3.1 6.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Affected products

  • HP Inc. Certain HP Desktop PC products
  • hp elite_tower_880_g9_desktop_pc
  • hp elitedesk_880_g8_tower_pc
  • hp eliteone_800_g8_27_all-in-one_pc
  • hp pro_mini_400_g9_desktop_pc
  • hp pro_sff_400_g9_desktop_pc
  • hp pro_tower_480_g9_desktop_pc
  • hp z1_g9_tower_desktop_pc
  • hp z2_small_form_factor_g9_workstation
  • hp z2_mini_g9_workstation
  • hp z2_tower_g9_workstation

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.