CVE-2023-5449 - Vulnerability Details

A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature which may allow a monitor’s Theft Deterrence to be deactivated.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00066.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

HP Inc.

HP Displays

affected

Version	Status	Constraints
`See HP Security Bulletin reference for affected products.`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:hp:e22_g4_fhd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e22_g4_fhd:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:hp:e23_g4_fhd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e23_g4_fhd:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:hp:e24i_g4_wuxga_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e24i_g4_wuxga:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:hp:e24mv_g4_fhd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e24mv_g4_fhd:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:hp:e24q_g4_qhd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e24q_g4_qhd:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:hp:e24t_g4_fhd_touch_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e24t_g4_fhd_touch:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:hp:e27_g4_fhd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e27_g4_fhd:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:hp:e27q_g4_qhd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:e27q_g4_qhd:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:hp:elitedisplay_e202_20-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedisplay_e202_20-inch:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:hp:elitedisplay_e230t_23-inch_touch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedisplay_e230t_23-inch_touch:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:hp:elitedisplay_e243i_24-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedisplay_e243i_24-inch:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:hp:elitedisplay_e243p_23.8-inch_sure_view_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedisplay_e243p_23.8-inch_sure_view:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:hp:elitedisplay_e273_27-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedisplay_e273_27-inch:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:hp:elitedisplay_e273m_27-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedisplay_e273m_27-inch:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:hp:m24m_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:m24m:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:hp:m27ha_fhd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:m27ha_fhd:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:hp:m27m_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:m27m:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:hp:p22_g4_22_fhd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:p22_g4_22_fhd:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:hp:p22h_g4_fhd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:p22h_g4_fhd:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:hp:p22va_g4_fhd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:p22va_g4_fhd:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:hp:p24v_g4_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:p24v_g4:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:hp:p27h_g4_fhd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:p27h_g4_fhd:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:hp:p27v_g4_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:p27v_g4:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:hp:z22n_g2_21.5-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:z22n_g2_21.5-inch:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:hp:z23n_g2_23-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:z23n_g2_23-inch:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:hp:z24f_g3_fhd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:z24f_g3_fhd:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:hp:z24i_g2_24-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:z24i_g2_24-inch:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:hp:z24n_g3_wuxga_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:z24n_g3_wuxga:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:hp:z24nf_g2_23.8-inch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:z24nf_g2_23.8-inch:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Hp Subscribe	E22 G4 Fhd Subscribe E22 G4 Fhd Firmware Subscribe E23 G4 Fhd Subscribe E23 G4 Fhd Firmware Subscribe E24i G4 Wuxga Subscribe E24i G4 Wuxga Firmware Subscribe E24mv G4 Fhd Subscribe E24mv G4 Fhd Firmware Subscribe E24q G4 Qhd Subscribe E24q G4 Qhd Firmware Subscribe E24t G4 Fhd Touch Subscribe E24t G4 Fhd Touch Firmware Subscribe E27 G4 Fhd Subscribe E27 G4 Fhd Firmware Subscribe E27q G4 Qhd Subscribe E27q G4 Qhd Firmware Subscribe Elitedisplay E202 20-inch Subscribe Elitedisplay E202 20-inch Firmware Subscribe Elitedisplay E230t 23-inch Touch Subscribe Elitedisplay E230t 23-inch Touch Firmware Subscribe Elitedisplay E243i 24-inch Subscribe Elitedisplay E243i 24-inch Firmware Subscribe Elitedisplay E243p 23.8-inch Sure View Subscribe Elitedisplay E243p 23.8-inch Sure View Firmware Subscribe Elitedisplay E273 27-inch Subscribe Elitedisplay E273 27-inch Firmware Subscribe Elitedisplay E273m 27-inch Subscribe Elitedisplay E273m 27-inch Firmware Subscribe M24m Subscribe M24m Firmware Subscribe M27ha Fhd Subscribe M27ha Fhd Firmware Subscribe M27m Subscribe M27m Firmware Subscribe P22 G4 22 Fhd Subscribe P22 G4 22 Fhd Firmware Subscribe P22h G4 Fhd Subscribe P22h G4 Fhd Firmware Subscribe P22va G4 Fhd Subscribe P22va G4 Fhd Firmware Subscribe P24v G4 Subscribe P24v G4 Firmware Subscribe P27h G4 Fhd Subscribe P27h G4 Fhd Firmware Subscribe P27v G4 Subscribe P27v G4 Firmware Subscribe Z22n G2 21.5-inch Subscribe Z22n G2 21.5-inch Firmware Subscribe Z23n G2 23-inch Subscribe Z23n G2 23-inch Firmware Subscribe Z24f G3 Fhd Subscribe Z24f G3 Fhd Firmware Subscribe Z24i G2 24-inch Subscribe Z24i G2 24-inch Firmware Subscribe Z24n G3 Wuxga Subscribe Z24n G3 Wuxga Firmware Subscribe Z24nf G2 23.8-inch Subscribe Z24nf G2 23.8-inch Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2023-57764	A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature which may allow a monitor’s Theft Deterrence to be deactivated.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://support.hp.com/us-en/document/ish_9438665-9438794-16

History

Wed, 18 Sep 2024 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: hp

Published: 2023-10-13T16:23:12.704Z

Updated: 2024-09-18T14:20:49.159Z

Reserved: 2023-10-06T15:54:48.265Z

Link: CVE-2023-5449

Vulnrichment

Updated: 2024-08-02T07:59:44.702Z

NVD

Status : Modified

Published: 2023-10-13T17:15:09.767

Modified: 2024-11-21T08:41:47.353

Link: CVE-2023-5449

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

NVD-CWE-noinfo

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object