CVE-2017-2751

A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.

• hp hp 240 g1 firmware (< f.48) • hp hp 245 g1 firmware (< f.48) • hp hp 1000-1300 firmware (< f.48) • hp hp 250 g1 notebook pc firmware (< f.47) • hp hp 255 g1 notebook pc firmware (< f.47) • hp hp envy 15-j000 firmware (< f.22) • hp hp envy 15-j100 firmware (< f.71) • hp hp pavilion 15-n000 firmware (< f.72) • hp hp 246 firmware (< f.04) • hp hp 455 firmware (< f.08) • hp hp envy 17 j100 firmware (< f.71) • hp hp envy 17-j100 leap motion se firmware (< f.71) • hp hp split 13-g200 firmware (< f.25) • hp hp envy 100 firmware (< f.22) • hp hp pavilion 14-n000 firmware (< f.72) • hp hp envy 14-k100 firmware (< f.22) • hp hp spectre x2 13-smb pro firmware (< f.25) • hp hp spectre 13-h200 firmware (< f.25) • hp hp pavilion 15-n200 firmware (< f.72) • hp hp pavilion 15-n300 firmware (< f.72) • hp hp envy m6-n000 firmware (< f.26) • hp hp 255 g3 firmware (< f.45) • hp hp 14-g000 firmware (< f.45) • hp hp pavilion 11-n000 firmware (< f.2e) • hp hp 15-r000 firmware (< f.43) • hp hp 15-r500 firmware (< f.43) • hp hp pavilion 10-f000 firmware (< f.0e) • hp hp g14-a000 firmware (< f.06) • hp hp 14-r000 firmware (< f.43) • hp hp 240 g3 firmware (< f.43) • hp hp 246 g3 firmware (< f.43) • hp compaq cq45-900 firmware • hp compaq 14-h000 firmware • hp compaq 14-s000 firmware