« Volver al listado

CVE-2023-4499

Estado: ModificadaAlta (7.5)—

A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Thinupdate

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-4499",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-4499",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-17T20:07:12.634730Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "HP Inc.",
          "product": "HP ThinUpdate",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:hp:thinupdate:-:*:*:*:*:*:*:*"
          ],
          "vendor": "hp",
          "product": "thinupdate",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-10-13T17:15:09.653",
  "references": [
    {
      "url": "https://support.hp.com/us-en/document/ish_9440593-9440618-16",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://support.hp.com/us-en/document/ish_9440593-9440618-16",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una posible vulnerabilidad de seguridad en la utilidad HP ThinUpdate (también conocida como herramienta de descarga de software e imágenes de recuperación de HP) que puede provocar la divulgación de información. HP está lanzando medidas de mitigación para la posible vulnerabilidad."
    }
  ],
  "lastModified": "2026-06-17T06:37:57.843",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:thinupdate:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81562855-687E-455C-8B1E-80DA06D50DDB",
              "versionEndExcluding": "2.7.15"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:elite_mt645:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B6383BB5-0A11-4CAB-BCAF-AE7313224F0E"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt21:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E6E137D9-11DA-4D32-8D47-33437C4B9B78"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt22:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6770B1E2-599A-42B6-A8B9-B6BAE0392AFA"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt31:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "37419335-DB36-47F4-8D76-7383265ABBBF"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt32:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FE7D0BF7-E4FD-45DB-8434-E1E1D14C8D9F"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt43:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0A807E9A-FF72-4FDF-91CB-B95A3BA444E8"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt44:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D5C09F1C-7BE6-4EEA-9E4C-54E638AB288A"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt45:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AD51E634-1DC3-468D-BA97-2390C37C1244"
            },
            {
              "criteria": "cpe:2.3:h:hp:mt46:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E424F17B-06C0-4630-8797-14FEC810AD08"
            },
            {
              "criteria": "cpe:2.3:h:hp:pro_mt440_g3:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5CD2DA81-481B-4A5A-835F-EE3A37FEE9EB"
            },
            {
              "criteria": "cpe:2.3:h:hp:t430:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CA282389-B256-4E59-966A-F45533AB0D0E"
            },
            {
              "criteria": "cpe:2.3:h:hp:t530:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F2EEE389-8B47-4988-9C13-7D78302BF4D9"
            },
            {
              "criteria": "cpe:2.3:h:hp:t540:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BFDD3D12-908A-4165-8099-D2E81C938CD6"
            },
            {
              "criteria": "cpe:2.3:h:hp:t628:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E211855B-CC97-4465-BB6B-6A21BE49EB8B"
            },
            {
              "criteria": "cpe:2.3:h:hp:t630:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0EFFE956-921E-43DE-B4A5-97DDCC12B69C"
            },
            {
              "criteria": "cpe:2.3:h:hp:t638:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D2328866-4483-4586-91A2-CEBABDA87426"
            },
            {
              "criteria": "cpe:2.3:h:hp:t640:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D6912F54-14EE-462B-B288-5E764BCB67DC"
            },
            {
              "criteria": "cpe:2.3:h:hp:t730:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7755FA5A-34A1-43B4-ABE3-34166A706B02"
            },
            {
              "criteria": "cpe:2.3:h:hp:t740:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FD4CF900-3C60-4D6E-8AFC-1B857572B3DF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}