What’s Vulnerable › Vulnerabilities

CVE-2020-15596

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-12 · updated 2026-06-17
• Weakness: CWE-427

Description

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.

Affected products

• HP Elite X2 1012 G1 Firmware: before 8.2206.1717.166 — fixed in 8.2206.1717.166
• HP Elite X2 1012 G2 Firmware: before 8.2206.1717.634 — fixed in 8.2206.1717.634
• HP Elitebook 1030 G1 Firmware: before 8.2206.1717.166 — fixed in 8.2206.1717.166
• HP Elitebook 1040 G4 Firmware: before 8.2206.1717.634 — fixed in 8.2206.1717.634
• HP Elitebook Folio 1040 G3 Firmware: before 8.2206.1717.166 — fixed in 8.2206.1717.166
• HP Elitebook Folio G1 Firmware: before 8.2206.1717.166 — fixed in 8.2206.1717.166
• HP Elitebook Revolve 810 G2 Firmware: before 10.1201.1717.108 — fixed in 10.1201.1717.108
• HP Elitebook Revolve 810 G3 Firmware: before 10.1201.1717.108 — fixed in 10.1201.1717.108
• HP Elitebook X360 1020 G2 Firmware: before 8.2206.1717.634 — fixed in 8.2206.1717.634
• HP Elitebook X360 1030 G2 Firmware: before 8.2206.1717.634 — fixed in 8.2206.1717.634
• HP Pro X2 612 G2 Firmware: before 8.2206.1717.634 — fixed in 8.2206.1717.634
• HP Zbook Studio G3 Firmware: before 8.2206.1717.166 — fixed in 8.2206.1717.166
• HP Zbook Studio G4 Firmware: before 8.2206.1717.634 — fixed in 8.2206.1717.634
• HP Zbook X2 G4 Firmware: before 8.2206.1717.634 — fixed in 8.2206.1717.634

How to fix

Upgrade to a fixed version: HP Elite X2 1012 G1 Firmware 8.2206.1717.166; HP Elite X2 1012 G2 Firmware 8.2206.1717.634; HP Elitebook 1030 G1 Firmware 8.2206.1717.166; HP Elitebook 1040 G4 Firmware 8.2206.1717.634; HP Elitebook Folio 1040 G3 Firmware 8.2206.1717.166; HP Elitebook Folio G1 Firmware 8.2206.1717.166; HP Elitebook Revolve 810 G2 Firmware 10.1201.1717.108; HP Elitebook Revolve 810 G3 Firmware 10.1201.1717.108; HP Elitebook X360 1020 G2 Firmware 8.2206.1717.634; HP Elitebook X360 1030 G2 Firmware 8.2206.1717.634; HP Pro X2 612 G2 Firmware 8.2206.1717.634; HP Zbook Studio G3 Firmware 8.2206.1717.166. Check the vendor advisory for mitigations.

References

• https://seclists.org/fulldisclosure/2020/Jul/30
• https://support.hp.com/document/c06706305
• https://seclists.org/fulldisclosure/2020/Jul/30
• https://support.hp.com/document/c06706305

Get alerted when CVE-2020-15596 or the next vulnerability affects your stack