CVE-2025-43017
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
HP ThinPro 8.1 System management application failed to verify user's true identity. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
Risk Assessment
Failure to verify identity could allow unauthorized access or manipulation of system settings, posing a security risk to ThinPro devices.
Recommendation
Install HP ThinPro 8.1 SP8 or later to ensure proper user identity verification.
Other vulnerabilities in HP ThinPro
See all- CVE-2016-2246High
HP ThinPro versions 4.4 through 6.1 mishandle the keyboard layout control panel and virtual keyboard application, allowing local users to bypass intended access restrictions and gain privileges.
- CVE-2026-84900Medium
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially contain security vulnerabilities. HP has released HP ThinPro 9 SP3, which includes updates to mitigate potential vulnerabilities.
Original NVD description (English source)
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS