Skip to content

Important Security Update for HP ThinPro Users!

In today’s technological world, information security is a top priority. This is especially critical for corporate systems and operating systems designed to create a secure environment. HP has identified several critical vulnerabilities in the HP ThinPro operating system and has released an important security update to address them. If you do not install this update in time, your system may become vulnerable to cyberattacks.

Several components within HP ThinPro contain vulnerabilities that could lead to the following threats:

  • Privilege escalation – an attacker could gain administrative rights within the system;
  • Arbitrary code execution – malicious code could be executed remotely;
  • Denial-of-service (DoS) attacks – could disrupt system functionality;
  • Data leakage – sensitive information could fall into the hands of attackers.

The identified vulnerabilities impact the following key components of HP ThinPro:

  1. GStreamer – a multimedia processing framework. Critical vulnerabilities include:
    • CVE-2024-47606, CVE-2024-47615, CVE-2024-47607, CVE-2024-47538, CVE-2024-47600, CVE-2024-47537, CVE-2024-47613, CVE-2024-47539, CVE-2024-47540, CVE-2024-47834, CVE-2024-47597, CVE-2024-47598, CVE-2024-47774, CVE-2024-47776, CVE-2024-47775, CVE-2024-47777 – some of these have been rated as high as 9.8 on the CVSS scale (critical severity).
  2. libarchive – a module for file compression and extraction:
    • CVE-2022-36227 (9.8 score, critical vulnerability).
  3. Linux Kernel:
    • CVE-2024-47685 (9.1 score, critical vulnerability).
  4. ZBar – a tool for reading and processing QR codes:
    • CVE-2023-40890, CVE-2023-40889 (9.8 score, critical vulnerabilities).

These vulnerabilities affect the following versions of HP ThinPro:

  • All versions of HP ThinPro up to and including HP ThinPro 8.1 SP6.

HP has released HP ThinPro 8.1 SP6, which addresses these vulnerabilities. Users are strongly advised to update their systems as soon as possible. If you are unable to install the update immediately, consider applying the following temporary security measures:

  • Install the update as soon as possible – this is the best way to secure your system.
  • Implement Patch Management – monitor and apply updates regularly.
  • Follow the principle of least privilege – grant users only the necessary access rights.
  • Configure network-level protection – restrict system access to trusted IP addresses only.
  • Utilize firewalls (WAF) and monitoring systems – detect and prevent suspicious activities.

The vulnerabilities discovered in HP ThinPro are critical and could be exploited by attackers. If you are using this operating system, it is highly recommended to install the update immediately and implement additional security measures. Cybersecurity is an ongoing process, and every organization and user must take the necessary steps to protect their systems.