Privilege Escalation and Code Execution Vulnerability in HP PC System BIOS

CVE-2024-5477

What is CVE-2024-5477?

A security vulnerability exists in the System BIOS of several HP PC models, enabling possibilities such as privilege escalation, arbitrary code execution, denial of service, or information disclosure. This vulnerability requires a physical attack using specialized tools to exploit. To mitigate the risks associated with this vulnerability, HP is providing a firmware update aimed at addressing the potential security gaps.

References