← Vulnerability feed

Vulnerability record · CVE-2022-48220 · published 14 February 2024

CVE-2022-48220: Hp elite mini 600 g9 firmware observable discrepancy vulnerability

Hp · Elite Mini 600 G9 Firmware

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.

6.4 CVSS 3.1 Medium EPSS 0.28% · top 81.1% CWE-203 · Observable discrepancy
6.4CVSS 3.1 base score
0.28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
27Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Affected products

27 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hp.com/us-en/document/ish_10170895-10170920-16/hpsbhf03907 Vendor Advisory
https://support.hp.com/us-en/document/ish_10170895-10170920-16/hpsbhf03907 Vendor Advisory

Track CVE-2022-48220 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.4CVE-2022-48219Hp elite mini 600 g9 firmware vulnerabilityPotential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detecti…EPSS 0.28%5.5CVE-2022-31643Hp elite dragonfly g3 firmware vulnerabilityA potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasi…EPSS 0.18%5.3CVE-2024-39891Twilio Authy API phone number enumeration via observable discrepancyAn unauthenticated endpoint in the Twilio Authy API, reachable through Authy Android before 25.1.0 and Authy iOS before 26.1.0, accepted streams of p…KEVEPSS 1.7%analysed

Source: NIST National Vulnerability Database (record CVE-2022-48220), CISA KEV, FIRST EPSS (scores of 2026-10-18). This page is refreshed as NVD updates the record.