Hp Hp_z2_tower_g9
8 CVEs affecting Hp Hp_z2_tower_g9. Latest disclosed: 2023-11-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31643 | Medium | 5.5 | 2023-04-28 | A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmwar… |
CVE-2023-29060 | Medium | 5.4 | 2023-11-28 | The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports. If exploited, a threat actor with physical access t… |
CVE-2023-29061 | Medium | 5.2 | 2023-11-28 | There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to a… |
CVE-2023-29065 | Medium | 4.1 | 2023-11-28 | The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potent… |
CVE-2023-29064 | Medium | 4.1 | 2023-11-28 | The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include… |
CVE-2023-29062 | Low | 3.8 | 2023-11-28 | The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately vali… |
CVE-2023-29066 | Low | 3.2 | 2023-11-28 | The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify informat… |
CVE-2023-29063 | Low | 2.4 | 2023-11-28 | The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for… |