CVE-2023-32673

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-12 · updated 2026-06-17

Description

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege.

Affected products

HP Inc HP Image Assistant: before 5.1.8 — fixed in 5.1.8
HP Inc. HP PC Hardware Diagnostics Windows: before 2.2.0.0 — fixed in 2.2.0.0
HP Thunderbolt Dock G2 Firmware: all versions

How to fix

Upgrade to a fixed version: HP Inc HP Image Assistant 5.1.8; HP Inc. HP PC Hardware Diagnostics Windows 2.2.0.0. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_8128401-8128440-16/hspbhf03848
https://support.hp.com/us-en/document/ish_8128401-8128440-16/hspbhf03848

Get alerted when CVE-2023-32673 or the next vulnerability affects your stack