Vulnerability record · CVE-2022-1602 · published 13 September 2022

CVE-2022-1602: Hp thinpro vulnerability

Hp · Thinpro

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 (SP9). HP has released Service Pack 10 (SP10) to remediate the potential vulnerability introduced in SP8.

5.5 CVSS 3.1 Medium EPSS 0.19% · top 91.8%

5.5CVSS 3.1 base score

0.19%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Thinpro Hp

References

Link	Tags
https://support.hp.com/us-en/document/ish_6415074-6415171-16/hpsbhf03789	Vendor Advisory
https://support.hp.com/us-en/document/ish_6415074-6415171-16/hpsbhf03789	Vendor Advisory

Track CVE-2022-1602 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.5CVE-2025-43017Hp thinpro execution with unnecessary privileges vulnerabilityHP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate …EPSS 0.27%28 Oct 2025 8.0CVE-2019-18909Hp thinpro os command injection vulnerabilityThe VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will exe…EPSS 2.2%22 Nov 2019 7.8CVE-2017-2740Hp thinpro vulnerabilityA potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and …EPSS 0.51%23 Jan 2018 7.8CVE-2016-2246Hp thinpro permissions and access controls vulnerabilityHP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended…EPSS 0.58%29 Dec 2016 6.8CVE-2019-16287Hp thinpro vulnerabilityIn HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged acces…EPSS 0.68%22 Nov 2019 6.8CVE-2019-18910Hp thinpro os command injection vulnerabilityThe Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will e…EPSS 0.65%22 Nov 2019 5.1CVE-2025-43024Hp thinpro vulnerabilityA GUI dialog of an application allows to view what files are in the file system without proper authorization.EPSS 0.28%28 Oct 2025

Source: NIST National Vulnerability Database (record CVE-2022-1602), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.