Read the docs
TI-2020-12271 Aliases CVE-2020-15596GHSA-xp9g-2jr8-5wm3

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and…

Priority LOW 30CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.

Summary

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.

Why it matters now

EPSS 0.00465 40th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:o:hp:elite_x2_1012_g1_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.166VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_x2_1012_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_x2_1012_g2_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.634VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_x2_1012_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1030_g1_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.166VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1030_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1040_g4_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.634VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1040_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_1040_g3_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.166VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_1040_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.166VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_revolve_810_g2_firmware:*:*:*:*:*:*:*:*before 10.1201.1717.108VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_revolve_810_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_revolve_810_g3_firmware:*:*:*:*:*:*:*:*before 10.1201.1717.108VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_revolve_810_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_x360_1020_g2_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.634VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_x360_1020_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_x360_1030_g2_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.634VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_x360_1030_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pro_x2_612_g2_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.634VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pro_x2_612_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.166VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_studio_g4_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.634VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_studio_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_x2_g4_firmware:*:*:*:*:*:*:*:*before 8.2206.1717.634VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_x2_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-15596
  2. 2026-10-03 Alias added: GHSA-xp9g-2jr8-5wm3

References

Advisory 2

  • TI-2022-17222 Incorrect default permissions in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 8.4
  • TI-2022-13567 Incorrect authorization in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2022-13565 Incorrect authorization in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2022-10542 Code injection in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2019-12258 A potential security vulnerability has been identified in multiple HP products and… CVSS 3.1HIGH 7.2
  • TI-2022-21512 Time-of-check time-of-use race condition in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences