VulnerabilityModified
CVE-2020-15596
The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.
MEDIUM 6.7EPSS 0.43%
Does this matter?
Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.
Description
The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.43% probability · 36th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-427
- Affected
- hp/elite x2 1012 g1 firmware · hp/elite x2 1012 g2 firmware · hp/elitebook 1030 g1 firmware · hp/elitebook 1040 g4 firmware · hp/elitebook folio 1040 g3 firmware · hp/elitebook folio g1 firmware · hp/elitebook revolve 810 g2 firmware · hp/elitebook revolve 810 g3 firmware · hp/elitebook x360 1020 g2 firmware · hp/elitebook x360 1030 g2 firmware · hp/pro x2 612 g2 firmware · hp/zbook studio g3 firmware · hp/zbook studio g4 firmware · hp/zbook x2 g4 firmware
- Source
- cve@mitre.org
References
- https://seclists.org/fulldisclosure/2020/Jul/30Mailing List, Third Party Advisory
- https://support.hp.com/document/c06706305Vendor Advisory
- https://seclists.org/fulldisclosure/2020/Jul/30Mailing List, Third Party Advisory
- https://support.hp.com/document/c06706305Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.