A potential security vulnerability has been identified in certain HP Displays supporting…
Priority LOW 15Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature which may allow a monitor’s Theft Deterrence to be deactivated.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00176 7th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hewlett Packard Enterprise | HP Displays | See HP Security Bulletin reference for affected products. and later | — | No fix listed | CNA |
- HP Displays VendorHewlett Packard Enterprise Affected See HP Security Bulletin reference for affected products. and later Fixed in — No fix listed CNA
CPE configurations NVD · 58
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hp:e22_g4_fhd_firmware:*:*:*:*:*:*:*:* | before 1.0.3.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e22_g4_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:e23_g4_fhd_firmware:*:*:*:*:*:*:*:* | before 1.0.3.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e23_g4_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:e24i_g4_wuxga_firmware:*:*:*:*:*:*:*:* | before 1.1.4.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e24i_g4_wuxga:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:e24mv_g4_fhd_firmware:*:*:*:*:*:*:*:* | before 1.0.9.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e24mv_g4_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:e24q_g4_qhd_firmware:*:*:*:*:*:*:*:* | before 1.0.4.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e24q_g4_qhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
- cpe:2.3:o:hp:e22_g4_fhd_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e22_g4_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:e23_g4_fhd_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e23_g4_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:e24i_g4_wuxga_firmware:*:*:*:*:*:*:*:* Versions before 1.1.4.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e24i_g4_wuxga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:e24mv_g4_fhd_firmware:*:*:*:*:*:*:*:* Versions before 1.0.9.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e24mv_g4_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:e24q_g4_qhd_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e24q_g4_qhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
Show 48 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hp:e24t_g4_fhd_touch_firmware:*:*:*:*:*:*:*:* | before 1.0.1.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e24t_g4_fhd_touch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:e27_g4_fhd_firmware:*:*:*:*:*:*:*:* | before 1.0.3.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e27_g4_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:e27q_g4_qhd_firmware:*:*:*:*:*:*:*:* | before 1.0.4.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:e27q_g4_qhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:elitedisplay_e202_20-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedisplay_e202_20-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:elitedisplay_e230t_23-inch_touch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedisplay_e230t_23-inch_touch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:elitedisplay_e243i_24-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedisplay_e243i_24-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:elitedisplay_e243p_23.8-inch_sure_view_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedisplay_e243p_23.8-inch_sure_view:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:elitedisplay_e273_27-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedisplay_e273_27-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:elitedisplay_e273m_27-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedisplay_e273m_27-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:m24m_firmware:*:*:*:*:*:*:*:* | before 1.0.7.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:m24m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:m27ha_fhd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:m27ha_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:m27m_firmware:*:*:*:*:*:*:*:* | before 1.1.7.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:m27m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:p22_g4_22_fhd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:p22_g4_22_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:p22h_g4_fhd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:p22h_g4_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:p22va_g4_fhd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:p22va_g4_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:p24v_g4_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:p24v_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:p27h_g4_fhd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:p27h_g4_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:p27v_g4_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:p27v_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z22n_g2_21.5-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z22n_g2_21.5-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z23n_g2_23-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z23n_g2_23-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z24f_g3_fhd_firmware:*:*:*:*:*:*:*:* | before 1.0.6.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z24f_g3_fhd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z24i_g2_24-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z24i_g2_24-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z24n_g3_wuxga_firmware:*:*:*:*:*:*:*:* | before 1.1.6.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z24n_g3_wuxga:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z24nf_g2_23.8-inch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z24nf_g2_23.8-inch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
- cpe:2.3:o:hp:e24t_g4_fhd_touch_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e24t_g4_fhd_touch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:e27_g4_fhd_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e27_g4_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:e27q_g4_qhd_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:e27q_g4_qhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:elitedisplay_e202_20-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedisplay_e202_20-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:elitedisplay_e230t_23-inch_touch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedisplay_e230t_23-inch_touch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:elitedisplay_e243i_24-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedisplay_e243i_24-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:elitedisplay_e243p_23.8-inch_sure_view_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedisplay_e243p_23.8-inch_sure_view:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:elitedisplay_e273_27-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedisplay_e273_27-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:elitedisplay_e273m_27-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedisplay_e273m_27-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:m24m_firmware:*:*:*:*:*:*:*:* Versions before 1.0.7.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:m24m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:m27ha_fhd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:m27ha_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:m27m_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:m27m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:p22_g4_22_fhd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:p22_g4_22_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:p22h_g4_fhd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:p22h_g4_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:p22va_g4_fhd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:p22va_g4_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:p24v_g4_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:p24v_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:p27h_g4_fhd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:p27h_g4_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:p27v_g4_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:p27v_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z22n_g2_21.5-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z22n_g2_21.5-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z23n_g2_23-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z23n_g2_23-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z24f_g3_fhd_firmware:*:*:*:*:*:*:*:* Versions before 1.0.6.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z24f_g3_fhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z24i_g2_24-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z24i_g2_24-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z24n_g3_wuxga_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z24n_g3_wuxga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z24nf_g2_23.8-inch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z24nf_g2_23.8-inch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-5449
- 2026-10-03 Alias added: GHSA-687q-46r9-m8ww
References
Sources
- CVE-2023-5449 · CVE Program
- CVE-2023-5449 · NVD
- FIRST EPSS
- GHSA-687q-46r9-m8ww · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences