WID-SEC-W-2022-2358

DeutschShown in its original language — a full translation is planned for a future version.

HP BIOS: Schwachstelle ermöglicht Codeausführung, Denial of Service und Informationsoffenlegung

view advisory published 2022-12-18

Ein lokaler Angreifer kann eine Schwachstelle im HP BIOS ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herzustellen und Informationen offenzulegen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-43779US	high7.0	0.14% (3rd)	—	2023-02-12
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code…

references

External citations — patches, advisories, analysis.

HP Security Bulletin HPSBHF03948 vom 2024-06-07external
HP Customer Support - Knowledge Base vom 2022-12-18external
WID-SEC-W-2022-2358 - CSAF Versionself
WID-SEC-2022-2358 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan