CVE-2023-4499 - Vulnerability Details - OpenCVE

A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Hp	Elite Mt645 Mt21 Mt22 Mt31 Mt32 Mt43 Mt44 Mt45 Mt46 Pro Mt440 G3 T430 T530 T540 T628 T630 T638 T640 T730 T740 Thinupdate

Configuration 1 [-]

AND

cpe:2.3:a:hp:thinupdate:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:hp:elite_mt645:-:::::::*
	cpe:2.3:h:hp:mt21:-:::::::*
	cpe:2.3:h:hp:mt22:-:::::::*
	cpe:2.3:h:hp:mt31:-:::::::*
	cpe:2.3:h:hp:mt32:-:::::::*
	cpe:2.3:h:hp:mt43:-:::::::*
	cpe:2.3:h:hp:mt44:-:::::::*
	cpe:2.3:h:hp:mt45:-:::::::*
	cpe:2.3:h:hp:mt46:-:::::::*
	cpe:2.3:h:hp:pro_mt440_g3:-:::::::*
	cpe:2.3:h:hp:t430:-:::::::*
	cpe:2.3:h:hp:t530:-:::::::*
	cpe:2.3:h:hp:t540:-:::::::*
	cpe:2.3:h:hp:t628:-:::::::*
	cpe:2.3:h:hp:t630:-:::::::*
	cpe:2.3:h:hp:t638:-:::::::*
	cpe:2.3:h:hp:t640:-:::::::*
	cpe:2.3:h:hp:t730:-:::::::*
	cpe:2.3:h:hp:t740:-:::::::*

No data.

References

Link	Providers
https://support.hp.com/us-en/document/ish_9440593-9440618-16

History

Tue, 17 Sep 2024 20:30:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:hp:thinupdate:-:::::::*
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: hp

Published: 2023-10-13T16:24:29.582Z

Updated: 2024-09-17T20:08:58.168Z

Reserved: 2023-08-23T16:17:59.466Z

Link: CVE-2023-4499

Vulnrichment

Updated: 2024-08-02T07:31:06.278Z

NVD

Status : Modified

Published: 2023-10-13T17:15:09.653

Modified: 2024-11-21T08:35:17.763

Link: CVE-2023-4499

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:thinupdate:*:*:*:*:*:*:*:*", "matchCriteriaId": "81562855-687E-455C-8B1E-80DA06D50DDB", "versionEndExcluding": "2.7.15", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hp:elite_mt645:-:*:*:*:*:*:*:*", "matchCriteriaId": "B6383BB5-0A11-4CAB-BCAF-AE7313224F0E", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt21:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6E137D9-11DA-4D32-8D47-33437C4B9B78", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt22:-:*:*:*:*:*:*:*", "matchCriteriaId": "6770B1E2-599A-42B6-A8B9-B6BAE0392AFA", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt31:-:*:*:*:*:*:*:*", "matchCriteriaId": "37419335-DB36-47F4-8D76-7383265ABBBF", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt32:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE7D0BF7-E4FD-45DB-8434-E1E1D14C8D9F", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt43:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A807E9A-FF72-4FDF-91CB-B95A3BA444E8", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt44:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5C09F1C-7BE6-4EEA-9E4C-54E638AB288A", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt45:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD51E634-1DC3-468D-BA97-2390C37C1244", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:mt46:-:*:*:*:*:*:*:*", "matchCriteriaId": "E424F17B-06C0-4630-8797-14FEC810AD08", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:pro_mt440_g3:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD2DA81-481B-4A5A-835F-EE3A37FEE9EB", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t430:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA282389-B256-4E59-966A-F45533AB0D0E", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t530:-:*:*:*:*:*:*:*", "matchCriteriaId": "F2EEE389-8B47-4988-9C13-7D78302BF4D9", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t540:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFDD3D12-908A-4165-8099-D2E81C938CD6", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t628:-:*:*:*:*:*:*:*", "matchCriteriaId": "E211855B-CC97-4465-BB6B-6A21BE49EB8B", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t630:-:*:*:*:*:*:*:*", "matchCriteriaId": "0EFFE956-921E-43DE-B4A5-97DDCC12B69C", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t638:-:*:*:*:*:*:*:*", "matchCriteriaId": "D2328866-4483-4586-91A2-CEBABDA87426", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t640:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6912F54-14EE-462B-B288-5E764BCB67DC", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t730:-:*:*:*:*:*:*:*", "matchCriteriaId": "7755FA5A-34A1-43B4-ABE3-34166A706B02", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:t740:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD4CF900-3C60-4D6E-8AFC-1B857572B3DF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability."}, {"lang": "es", "value": "Se ha identificado una posible vulnerabilidad de seguridad en la utilidad HP ThinUpdate (tambi\u00e9n conocida como herramienta de descarga de software e im\u00e1genes de recuperaci\u00f3n de HP) que puede provocar la divulgaci\u00f3n de informaci\u00f3n. HP est\u00e1 lanzando medidas de mitigaci\u00f3n para la posible vulnerabilidad."}], "id": "CVE-2023-4499", "lastModified": "2024-11-21T08:35:17.763", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-13T17:15:09.653", "references": [{"source": "hp-security-alert@hp.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.hp.com/us-en/document/ish_9440593-9440618-16"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.hp.com/us-en/document/ish_9440593-9440618-16"}], "sourceIdentifier": "hp-security-alert@hp.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "nvd@nist.gov", "type": "Primary"}]}