CVE-2022-23931

CVE-2022-23931

High · published March 11, 2022

CVSS v3.1
8.2
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00437 · 36.9th percentile
Published
2022-03-11T23:15Z
Affected products (1)
ProductVersionsFixed in
hp/pc_bios< 02.07.1002.07.10
References (2)
https://support.hp.com/us-en/document/ish_5817864-5817896-16 · [email protected]https://support.hp.com/us-en/document/ish_5817864-5817896-16 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 11 MAR 17:54Z
    Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution…
    cvelistv5