CVE-2022-48219

Severity: medium (CVSS 6.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-14 · updated 2026-06-17
Weakness: CWE-693

Description

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.

Affected products

HP Elite Mini 600 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elite Mini 800 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elite Sff 600 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elite Sff 800 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elite Tower 600 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elite Tower 680 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elite Tower 800 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elite Tower 880 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Elitedesk 800 G8 Desktop Mini Firmware: before 02.14.00 — fixed in 02.14.00
HP Elitedesk 800 G8 Small Form Factor Firmware: before 02.14.00 — fixed in 02.14.00
HP Elitedesk 800 G8 Tower Firmware: before 02.14.00 — fixed in 02.14.00
HP Elitedesk 880 G8 Tower Firmware: before 02.14.00 — fixed in 02.14.00
HP Eliteone 800 G8 24 All-In-One Firmware: before 02.14.00 — fixed in 02.14.00
HP Eliteone 800 G8 27 All-In-One Firmware: before 02.14.00 — fixed in 02.14.00
HP Mini Conferencing Pc Firmware: before 02.12.02 — fixed in 02.12.02
HP Pro Mini 260 G9 Firmware: before 02.14.00 — fixed in 02.14.00
HP Pro Mini 400 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Pro Sff 400 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Pro Tower 400 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Pro Tower 480 G9 Firmware: before 02.12.02 — fixed in 02.12.02
HP Z1 G8 Tower Firmware: before 02.14.00 — fixed in 02.14.00
HP Z1 G9 Tower Firmware: before 02.12.02 — fixed in 02.12.02
HP Z2 Mini G9 Firmware: before 02.02.02 — fixed in 02.02.02
HP Z2 Small Form Factor G8 Firmware: before 01.06.05 — fixed in 01.06.05
HP Z2 Small Form Factor G9 Firmware: before 02.02.02 — fixed in 02.02.02
HP Z2 Tower G8 Firmware: before 01.06.05 — fixed in 01.06.05
HP Z2 Tower G9 Firmware: before 02.02.02 — fixed in 02.02.02

How to fix

Upgrade to a fixed version: HP Elite Mini 600 G9 Firmware 02.12.02; HP Elite Mini 800 G9 Firmware 02.12.02; HP Elite Sff 600 G9 Firmware 02.12.02; HP Elite Sff 800 G9 Firmware 02.12.02; HP Elite Tower 600 G9 Firmware 02.12.02; HP Elite Tower 680 G9 Firmware 02.12.02; HP Elite Tower 800 G9 Firmware 02.12.02; HP Elite Tower 880 G9 Firmware 02.12.02; HP Elitedesk 800 G8 Desktop Mini Firmware 02.14.00; HP Elitedesk 800 G8 Small Form Factor Firmware 02.14.00; HP Elitedesk 800 G8 Tower Firmware 02.14.00; HP Elitedesk 880 G8 Tower Firmware 02.14.00. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-48219 or the next vulnerability affects your stack