HP ThinUpdate - Improper Certificate Validation

🗓️ 13 Oct 2023 00:00:00Reported by HP Product Security Response TeamType

hp🔗 support.hp.com👁 16 Views

HP ThinUpdate security vulnerability disclosure and mitigatio

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-4499	13 Oct 202320:29	–	circl
CNNVD	HP ThinUpdate Trust Management Issue Vulnerability	13 Oct 202300:00	–	cnnvd
CVE	CVE-2023-4499	13 Oct 202316:24	–	cve
Cvelist	CVE-2023-4499	13 Oct 202316:24	–	cvelist
EUVD	EUVD-2023-54354	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#02058996: HP ThinUpdate vulnerable to improper server certificate verification	23 Oct 202300:00	–	jvn
Japan Vulnerability Notes	HP ThinUpdate vulnerable to improper server certificate verification	23 Oct 202305:26	–	jvn
NVD	CVE-2023-4499	13 Oct 202317:15	–	nvd
OSV	CVE-2023-4499	13 Oct 202317:15	–	osv
Prion	Information disclosure	13 Oct 202317:15	–	prion

Vulners

Node

hp hp_elite_mt645_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt21_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt22_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt31_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt32_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt43_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt44_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt45_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_mt46_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_pro_mt440_g3_mobile_thin_client_firmwareRange<2.7.15

OR

hp hp_t430_thin_client_firmwareRange<2.7.15

OR

hp hp_t530_thin_client_firmwareRange<2.7.15

OR

hp hp_t540_thin_client_firmwareRange<2.7.15

OR

hp hp_t628_thin_client_firmwareRange<2.7.15

OR

hp hp_t630_thin_client_firmwareRange<2.7.15

OR

hp hp_t638_thin_client_firmwareRange<2.7.15

OR

hp hp_t640_thin_client_firmwareRange<2.7.15

OR

hp hp_t730_thin_client_firmwareRange<2.7.15

OR

hp hp_t740_thin_client_firmwareRange<2.7.15

13 Oct 2023 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

EPSS0.00181

SSVC

hp thinupdate security vulnerability disclosure mitigation software certificate validation