Critical severity · published Jun 12, 2023
CVE-2023-32673
Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Image Assistant · HP
before 5.1.8 · source: NVD
PH
PC Hardware Diagnostics · HP
before 2.2.0.0 · source: NVD
TD
Thunderbolt Dock G2 Firmware · HP
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-32673
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-32673
Patch
https://support.hp.com/us-en/document/ish_8128401-8128440-16/hspbhf03848
More from Image Assistant
7.8
CVE-2023-5739
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege
7.0
CVE-2025-13492
A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3