Arbitrary Code Execution and Privilege Escalation in HP System BIOS
CVE-2022-31640

7HIGH

Key Information:

Vendor

HP
Status
HP Pc BiOS
Vendor
CVE Published:
14 June 2023

What is CVE-2022-31640?

Potential vulnerabilities exist in the system BIOS of various HP PC products that could be exploited to execute arbitrary code, escalate privileges, cause a denial of service, and disclose sensitive information. These vulnerabilities pose a significant risk, underscoring the importance of timely updates and vigilant security practices for users of affected devices.

Affected Version(s)

HP PC BIOS See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_6662920-6662944...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-31640 : Arbitrary Code Execution and Privilege Escalation in HP System BIOS