Lucene search

[email protected]CVE-2023-5449

HistoryOct 13, 2023 - 5:15 p.m.

CVE-2023-5449

2023-10-1317:15:09

[email protected]

web.nvd.nist.gov

cve-2023-5449

hp displays

security vulnerability

theft deterrence

nvd

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature which may allow a monitor’s Theft Deterrence to be deactivated.

Affected configurations

NVD

Node

hpe22_g4_fhdMatch-

AND

hpe22_g4_fhd_firmwareRange<1.0.3.0

Node

hpe23_g4_fhdMatch-

AND

hpe23_g4_fhd_firmwareRange<1.0.3.0

Node

hpe24i_g4_wuxgaMatch-

AND

hpe24i_g4_wuxga_firmwareRange<1.1.4.0

Node

hpe24mv_g4_fhdMatch-

AND

hpe24mv_g4_fhd_firmwareRange<1.0.9.0

Node

hpe24q_g4_qhdMatch-

AND

hpe24q_g4_qhd_firmwareRange<1.0.4.0

Node

hpe24t_g4_fhd_touchMatch-

AND

hpe24t_g4_fhd_touch_firmwareRange<1.0.1.0

Node

hpe27_g4_fhdMatch-

AND

hpe27_g4_fhd_firmwareRange<1.0.3.0

Node

hpe27q_g4_qhdMatch-

AND

hpe27q_g4_qhd_firmwareRange<1.0.4.0

Node

hpelitedisplay_e202_20-inchMatch-

AND

hpelitedisplay_e202_20-inch_firmwareMatch-

Node

hpelitedisplay_e230t_23-inch_touchMatch-

AND

hpelitedisplay_e230t_23-inch_touch_firmwareMatch-

Node

hpelitedisplay_e243i_24-inchMatch-

AND

hpelitedisplay_e243i_24-inch_firmwareMatch-

Node

hpelitedisplay_e243p_23.8-inch_sure_view_firmwareMatch-

AND

hpelitedisplay_e243p_23.8-inch_sure_viewMatch-

Node

hpelitedisplay_e273_27-inch_firmwareMatch-

AND

hpelitedisplay_e273_27-inchMatch-

Node

hpelitedisplay_e273m_27-inch_firmwareMatch-

AND

hpelitedisplay_e273m_27-inchMatch-

Node

hpm24m_firmwareRange<1.0.7.0

AND

hpm24mMatch-

Node

hpm27ha_fhd_firmwareMatch-

AND

hpm27ha_fhdMatch-

Node

hpm27m_firmwareRange<1.1.7.0

AND

hpm27mMatch-

Node

hpp22_g4_22_fhd_firmwareMatch-

AND

hpp22_g4_22_fhdMatch-

Node

hpp22h_g4_fhd_firmwareMatch-

AND

hpp22h_g4_fhdMatch-

Node

hpp22va_g4_fhd_firmwareMatch-

AND

hpp22va_g4_fhdMatch-

Node

hpp24v_g4_firmwareMatch-

AND

hpp24v_g4Match-

Node

hpp27h_g4_fhd_firmwareMatch-

AND

hpp27h_g4_fhdMatch-

Node

hpp27v_g4_firmwareMatch-

AND

hpp27v_g4Match-

Node

hpz22n_g2_21.5-inch_firmwareMatch-

AND

hpz22n_g2_21.5-inchMatch-

Node

hpz23n_g2_23-inch_firmwareMatch-

AND

hpz23n_g2_23-inchMatch-

Node

hpz24f_g3_fhd_firmwareRange<1.0.6.0

AND

hpz24f_g3_fhdMatch-

Node

hpz24i_g2_24-inch_firmwareMatch-

AND

hpz24i_g2_24-inchMatch-

Node

hpz24n_g3_wuxga_firmwareRange<1.1.6.0

AND

hpz24n_g3_wuxgaMatch-

Node

hpz24nf_g2_23.8-inch_firmwareMatch-

AND

hpz24nf_g2_23.8-inchMatch-

CPENameOperatorVersion
hp:e22_g4_fhd_firmwarehp e22 g4 fhd firmwarelt1.0.3.0

CPE	Name	Operator	Version
hp:e22_g4_fhd_firmware	hp e22 g4 fhd firmware	lt	1.0.3.0

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "HP Displays",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected products.",
        "status": "affected"
      }
    ]
  }
]

References

support.hp.com/us-en/document/ish_9438665-9438794-16

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-5449

prion1 cvelist1 nvd1 hp1