CVE-2020-15596
Medium
Description
The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.
SeverityMedium
CVSS6.7
Exploit probability—
ProductHp Elite X2 1012 G1 Firmware
PublishedAug 12, 2020
First seenAug 12, 2020
How to fix
Update
- hp elite_x2_1012_g1_firmware8.2206.1717.166 or later
- hp elite_x2_1012_g2_firmware8.2206.1717.634 or later
- hp elitebook_1030_g1_firmware8.2206.1717.166 or later
- hp elitebook_1040_g4_firmware8.2206.1717.634 or later
- hp elitebook_folio_1040_g3_firmware8.2206.1717.166 or later
- hp elitebook_folio_g1_firmware8.2206.1717.166 or later
- hp elitebook_revolve_810_g2_firmware10.1201.1717.108 or later
- hp elitebook_revolve_810_g3_firmware10.1201.1717.108 or later
- hp elitebook_x360_1020_g2_firmware8.2206.1717.634 or later
- hp elitebook_x360_1030_g2_firmware8.2206.1717.634 or later
- hp pro_x2_612_g2_firmware8.2206.1717.634 or later
- hp zbook_studio_g3_firmware8.2206.1717.166 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp elite_x2_1012_g1_firmware | v < 8.2206.1717.166 | 8.2206.1717.166 |
| hp elite_x2_1012_g2_firmware | v < 8.2206.1717.634 | 8.2206.1717.634 |
| hp elitebook_1030_g1_firmware | v < 8.2206.1717.166 | 8.2206.1717.166 |
| hp elitebook_1040_g4_firmware | v < 8.2206.1717.634 | 8.2206.1717.634 |
| hp elitebook_folio_1040_g3_firmware | v < 8.2206.1717.166 | 8.2206.1717.166 |
| hp elitebook_folio_g1_firmware | v < 8.2206.1717.166 | 8.2206.1717.166 |
| hp elitebook_revolve_810_g2_firmware | v < 10.1201.1717.108 | 10.1201.1717.108 |
| hp elitebook_revolve_810_g3_firmware | v < 10.1201.1717.108 | 10.1201.1717.108 |
| hp elitebook_x360_1020_g2_firmware | v < 8.2206.1717.634 | 8.2206.1717.634 |
| hp elitebook_x360_1030_g2_firmware | v < 8.2206.1717.634 | 8.2206.1717.634 |
| hp pro_x2_612_g2_firmware | v < 8.2206.1717.634 | 8.2206.1717.634 |
| hp zbook_studio_g3_firmware | v < 8.2206.1717.166 | 8.2206.1717.166 |
| hp zbook_studio_g4_firmware | v < 8.2206.1717.634 | 8.2206.1717.634 |
| hp zbook_x2_g4_firmware | v < 8.2206.1717.634 | 8.2206.1717.634 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.