CVE-2022-38396 Vulnerability Details

  /     /     /  

CVE-2022-38396 Metadata Quick Info

CVE Published: 03/02/2023 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: hp | Vendor: HP Inc. | Product: HP Factory Preinstalled Windows 10 20H2 Images
Status : PUBLISHED

---

CVE-2022-38396 Description

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: n/a
Source: HP Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).