CVE-2025-43017

EUVD-2025-36557
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
hpthinpro
8.1:sp2
hpthinpro
8.1:sp3
hpthinpro
8.1:sp4
hpthinpro
8.1:sp5
hpthinpro
8.1:sp6
hpthinpro
8.1:sp7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hp.com/us-en/document/ish_13164593-13164617-16/hpsbhf04066