CVE-2020-15596: The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks…

PriorityP425medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.43%

35.0th percentile

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
hp	elite_x2_1012_g1_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elite_x2_1012_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	elitebook_1030_g1_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elitebook_1040_g4_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	elitebook_folio_1040_g3_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elitebook_folio_g1_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	elitebook_revolve_810_g2_firmware	< 10.1201.1717.108	10.1201.1717.108
hp	elitebook_revolve_810_g3_firmware	< 10.1201.1717.108	10.1201.1717.108
hp	elitebook_x360_1020_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	elitebook_x360_1030_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	pro_x2_612_g2_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	zbook_studio_g3_firmware	< 8.2206.1717.166	8.2206.1717.166
hp	zbook_studio_g4_firmware	< 8.2206.1717.634	8.2206.1717.634
hp	zbook_x2_g4_firmware	< 8.2206.1717.634	8.2206.1717.634

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.