CVE-2023-4499

HIGH

7.5

CVSS Score

Published: October 13, 2023 at 04:24 PM UTC

Updated: June 17, 2026 at 06:37 AM UTC

20 products affected across 1 vendorThinupdateMt45Pro Mt440 G3

Using HP ThinUpdate by HP Inc.?

Get instant alerts when new vulnerabilities affect HP ThinUpdate - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.7%

SSVC

No known exploit

Description

A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Thinupdate · HP

95%

v < 2.7.15See HP Security Bulletin reference for affected versions.

Affected range stops below 2.7.15, so it looks safe — our inference, not a vendor statement

hp-elite-mt645 (environment) · hp-mt21 (environment) · hp-mt22 (environment) · hp-mt31 (environment) · hp-mt32 (environment) · hp-mt43 (environment) · hp-mt44 (environment) · hp-mt45 (environment) · hp-mt46 (environment) · hp-pro-mt440-g3 (environment) · hp-t430 (environment) · hp-t530 (environment) · hp-t540 (environment) · hp-t628 (environment) · hp-t630 (environment) · hp-t638 (environment) · hp-t640 (environment) · hp-t730 (environment) · hp-t740 (environment)

Elite Mt645 · HPdevice

80%

All versions

Mt21 · HPdevice

80%

All versions

Mt22 · HPdevice

80%

All versions

Mt31 · HPdevice

80%

All versions