What’s Vulnerable › Vulnerabilities

CVE-2023-5409

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-13 · updated 2026-06-17

Description

HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs. These models may be susceptible to a physical attack, allowing an untrusted source to tamper with the system firmware using a publicly disclosed private key. HP is providing recommended guidance for customers to reduce exposure to the potential vulnerability.

Affected products

• HP T430 Thin Client Firmware: all versions
• HP T638 Thin Client Firmware: all versions

References

• https://support.hp.com/us-en/document/ish_9441200-9441233-16
• https://support.hp.com/us-en/document/ish_9441200-9441233-16

Get alerted when CVE-2023-5409 or the next vulnerability affects your stack