CVE-2022-1602 Other in HP ThinPro OS

What is CVE-2022-1602?

CVE-2022-1602 is a medium-severity vulnerability in HP ThinPro OS, published on 13 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 (SP9). HP has released Service Pack 10 (SP10) to remediate the potential vulnerability introduced in SP8.

Which versions are affected by CVE-2022-1602?

It affects 1 product.

Products include Hp Thinpro.

How do I fix CVE-2022-1602?

No fix has been published for CVE-2022-1602 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-1602 being exploited?

There is no known exploitation of CVE-2022-1602 in the wild and no public exploit code.

Other vulnerabilities in HP ThinPro OS

• CVE-2025-43017 HP ThinPro 8.1 SP8 Security Updates High 8.5
• CVE-2019-18909 Command injection in ThinPro Linux High 8.0
• CVE-2017-2740 Privilege escalation in HP ThinPro High 7.8
• CVE-2016-2246 Privilege escalation in n/a High 7.8
• CVE-2019-16287 Privilege escalation in ThinPro Linux Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7pmm-qwrj-xg6v.