Arbitrary Code Execution and Privilege Escalation in HP PC System BIOS
CVE-2022-31642

7HIGH

Key Information:

Vendor
HP
Status
HP Pc BiOS
Vendor
CVE Published:
14 June 2023

Summary

Recent findings have revealed potential vulnerabilities within the system BIOS of various HP PC products. These vulnerabilities could enable an attacker to execute arbitrary code, escalate privileges, trigger a denial of service, or disclose sensitive information. Users of affected HP devices should remain vigilant and apply patches as they become available to mitigate these risks.

Affected Version(s)

HP PC BIOS See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_6662920-6662944...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.