TOCTOU Vulnerability in HP PC BIOS
CVE-2022-27538

7HIGH

Key Information:

Vendor

HP
Status
HP Pc BiOS
Vendor
CVE Published:
1 February 2023

What is CVE-2022-27538?

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been discovered in the BIOS for various HP PC products. This issue may allow attackers to execute arbitrary code, leading to denial of service and potential exposure of sensitive information. HP is taking action by releasing BIOS updates to mitigate this vulnerability and enhance product security.

Affected Version(s)

HP PC BIOS See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_7387020-7387107...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.