Is CVE-2022-48220 in the CISA KEV catalog?

No. CVE-2022-48220 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2022-48220?

CVE-2022-48220 has a CVSS v3 base score of 6.4 (MEDIUM).

What is the EPSS score for CVE-2022-48220?

CVE-2022-48220 has an EPSS score of 0.28% (20th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2022-48220?

Upgrade elite mini 600 g9 firmware to 02.12.02 or later. Fixes are available for 27 affected products.

CVE & CISA-KEV Catalog

CVE-2022-48220

MEDIUM

6.4

CVSS v3

NVD

Description

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.

CWE-203

How to fix

Remediation Available

elite mini 600 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elite mini 800 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elite sff 600 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elite sff 800 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elite tower 600 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elite tower 680 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elite tower 800 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elite tower 880 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

elitedesk 800 g8 desktop mini firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

elitedesk 800 g8 small form factor firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

elitedesk 800 g8 tower firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

elitedesk 880 g8 tower firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

eliteone 800 g8 24 all-in-one firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

eliteone 800 g8 27 all-in-one firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

mini conferencing pc firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

pro mini 260 g9 firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

pro mini 400 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

pro sff 400 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

pro tower 400 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

pro tower 480 g9 firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

z1 g8 tower firmwareNVD

Affected:< 02.14.00Fixed in:02.14.00CVE-2022-48220derived from NVD

z1 g9 tower firmwareNVD

Affected:< 02.12.02Fixed in:02.12.02CVE-2022-48220derived from NVD

z2 mini g9 firmwareNVD

Affected:< 02.02.02Fixed in:02.02.02CVE-2022-48220derived from NVD

z2 small form factor g8 firmwareNVD

Affected:< 01.06.05Fixed in:01.06.05CVE-2022-48220derived from NVD

z2 small form factor g9 firmwareNVD

Affected:< 02.02.02Fixed in:02.02.02CVE-2022-48220derived from NVD

z2 tower g8 firmwareNVD

Affected:< 01.06.05Fixed in:01.06.05CVE-2022-48220derived from NVD

z2 tower g9 firmwareNVD

Affected:< 02.02.02Fixed in:02.02.02CVE-2022-48220derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorPhysical

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityLow

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Exploit Intelligence

0.28%probability of exploitation in 30 days

20thpercentile

Low risk: more likely to be exploited than 20% of all known CVEs.

References

Vendor Advisory1

support.hp.com

Related Vulnerabilities

Other CWE-203 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2017-5753	Medium	5.6	94%	-	Fix
CVE-2003-0190	Medium	5.0	77%	-	Fix
CVE-2017-5715	Medium	5.6	74%	-	Fix
CVE-2018-3639	Medium	5.5	61%	-	Fix
CVE-2023-28770	High	7.5	58%	-	Fix
CVE-2004-1602	Medium	5.0	31%	-	-

Embed a live status badge for CVE-2022-48220

Markdown

[![CVE-2022-48220](https://tridentstack.com/cve/badge/CVE-2022-48220.svg)](https://tridentstack.com/cve/CVE-2022-48220)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-48220"><img src="https://tridentstack.com/cve/badge/CVE-2022-48220.svg" alt="CVE-2022-48220"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-01-09.