CVE-2020-15596

published 2020-08-12

CVE-2020-15596: The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
hp	elite_x2_1012_g1_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elite_x2_1012_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	elitebook_1030_g1_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elitebook_1040_g4_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	elitebook_folio_1040_g3_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elitebook_folio_g1_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elitebook_revolve_810_g2_firmware	< 10.1201.1717.108	10.1201.1717.108
hp	elitebook_revolve_810_g3_firmware	< 10.1201.1717.108	10.1201.1717.108
hp	elitebook_x360_1020_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	elitebook_x360_1030_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	pro_x2_612_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	zbook_studio_g3_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	zbook_studio_g4_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	zbook_x2_g4_firmware	< 8.2206.1717.634	8.2206.1717.634

CWE-427 CWE-200