CVEvulnerability

CVE-2022-27538

7.0 HIGH Published 2023-02-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-367

Description

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

Affected configurations

• hp dragonfly folio g3 2-in-1 firmware (< 01.03.01) • hp elite dragonfly firmware (< 01.22.00) • hp elite dragonfly g3 firmware (< 01.04.00) • hp elite dragonfly g2 firmware (< 01.11.00) • hp elite dragonfly max firmware (< 01.11.00) • hp elite x2 1013 g3 firmware (< 01.22.00) • hp elite x2 g4 firmware (< 01.22.00) • hp elite x2 g8 tablet firmware (< 01.11.00) • hp elite x360 1040 g9 2-in-1 firmware (< 01.04.02) • hp elitebook 1040 g9 firmware (< 01.04.02) • hp elitebook 1050 g1 firmware (< 01.22.00) • hp elitebook 630 g9 firmware (< 01.05.00) • hp elitebook 640 g9 firmware (< 01.05.00) • hp elitebook 645 g9 firmware (< 01.09.00) • hp elitebook 650 g9 firmware (< 01.05.00) • hp elitebook 655 g9 firmware (< 01.09.00) • hp elitebook 735 g5 firmware (< 01.22.00) • hp elitebook 735 g6 firmware (< 01.22.00) • hp elitebook 745 g5 firmware (< 01.22.00) • hp elitebook 745 g6 firmware (< 01.22.00) • hp elitebook 755 g5 firmware (< 01.22.00) • hp elitebook 830 g9 firmware (< 01.04.02) • hp elitebook 830 g5 firmware (< 01.22.00) • hp elitebook 830 g6 firmware (< 01.22.00) • hp elitebook 830 g7 firmware (< 01.11.00) • hp elitebook 830 g8 firmware (< 01.11.00) • hp elitebook 835 g9 firmware (< 01.03.01) • hp elitebook 835 g7 firmware (< 01.11.00) • hp elitebook 835 g8 firmware (< 01.11.00) • hp elitebook 836 g5 firmware (< 01.22.00) • hp elitebook 836 g6 firmware (< 01.22.00) • hp elitebook 840 g9 firmware (< 01.04.02) • hp elitebook 840 aero g8 firmware (< 01.11.00) • hp elitebook 840 g5 firmware (< 01.22.00) • hp elitebook 840 g5 healthcare edition firmware (< 01.22.00) • hp elitebook 840 g6 firmware (< 01.22.00) • hp elitebook 840 g6 healthcare edition firmware (< 01.22.00) • hp elitebook 840 g7 firmware (< 01.11.00) • hp elitebook 840 g8 firmware (< 01.11.00) • hp elitebook 840r g4 firmware (< 01.22.00) • hp elitebook 845 g9 firmware (< 01.03.01) • hp elitebook 845 g7 firmware (< 01.11.00) • hp elitebook 845 g8 firmware (< 01.11.00) • hp elitebook 846 g5 firmware (< 01.22.00) • hp elitebook 850 g5 firmware (< 01.22.00) • hp elitebook 850 g6 firmware (< 01.22.00) • hp elitebook 850 g7 firmware (< 01.11.00) • hp elitebook 850 g8 firmware (< 01.11.00) • hp elitebook 855 g7 firmware (< 01.11.00) • hp elitebook 855 g8 firmware (< 01.11.00) • hp elitebook 860 g9 firmware (< 01.04.02) • hp elitebook 865 g9 firmware (< 01.03.01) • hp elitebook x360 1030 g3 firmware (< 01.22.00) • hp elitebook x360 1030 g4 firmware (< 01.22.00) • hp elitebook x360 1030 g7 firmware (< 01.11.00) • hp elitebook x360 1030 g8 firmware (< 01.11.00) • hp elitebook x360 1040 g5 firmware (< 01.22.00) • hp elitebook x360 1040 g6 firmware (< 01.22.00) • hp elitebook x360 1040 g7 firmware (< 01.11.00) • hp elitebook x360 1040 g8 firmware (< 01.11.00) … and 257 more

Related

Weakness · CWE (1)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References