CVEvulnerability

CVE-2020-15596

6.7 MEDIUM Published 2020-08-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-427

Description

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.

Affected configurations

• hp elite x2 1012 g1 firmware (< 8.2206.1717.166) • hp elite x2 1012 g2 firmware (< 8.2206.1717.634) • hp elitebook 1030 g1 firmware (< 8.2206.1717.166) • hp elitebook 1040 g4 firmware (< 8.2206.1717.634) • hp elitebook folio 1040 g3 firmware (< 8.2206.1717.166) • hp elitebook folio g1 firmware (< 8.2206.1717.166) • hp elitebook revolve 810 g2 firmware (< 10.1201.1717.108) • hp elitebook revolve 810 g3 firmware (< 10.1201.1717.108) • hp elitebook x360 1020 g2 firmware (< 8.2206.1717.634) • hp elitebook x360 1030 g2 firmware (< 8.2206.1717.634) • hp pro x2 612 g2 firmware (< 8.2206.1717.634) • hp zbook studio g3 firmware (< 8.2206.1717.166) • hp zbook studio g4 firmware (< 8.2206.1717.634) • hp zbook x2 g4 firmware (< 8.2206.1717.634)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References