BIOS Vulnerability in HP Personal Computers
CVE-2022-31646

7.8HIGH

Key Information:

Vendor

HP
Status
HP Pc BiOS
Vendor
CVE Published:
14 June 2023

What is CVE-2022-31646?

Certain HP PC products have critical vulnerabilities in their system BIOS, which could potentially allow unauthorized users to execute arbitrary code, escalate privileges, cause a denial of service, or disclose sensitive information. This compromises the integrity and confidentiality of affected devices, posing a significant security risk for users.

Affected Version(s)

HP PC BIOS See HP Security Bulletin reference for affected versions

References

https://support.hp.com/us-en/document/ish_6664419-6664458...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.