CVEvulnerability
CVE-2022-27540
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-06-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-367
Description
A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
Affected configurations
• hp elitebook 745 g4 firmware (< 1.45)
• hp elitebook 745 g5 firmware (< 01.26.01)
• hp elitebook 745 g6 firmware (< 01.26.00)
• hp elitebook 755 g4 firmware (< 1.45)
• hp elitebook 755 g5 firmware (< 01.26.01)
• hp elitebook 820 g3 firmware (< 1.6)
• hp elitebook 820 g4 firmware (< 1.48)
• hp elitebook 828 g3 firmware (< 1.6)
• hp elitebook 828 g4 firmware (< 1.48)
• hp elitebook 830 13.3 inch g9 notebook pc firmware (< 01.07.00)
• hp elitebook 830 g5 firmware (< 01.28.00)
• hp elitebook 830 g6 firmware (< 01.26.00)
• hp elitebook 830 g7 firmware (< 01.14.00)
• hp elitebook 830 g8 firmware (< 01.15.02)
• hp elitebook 835 13 inch g9 notebook pc firmware (< 01.05.01)
• hp elitebook 735 g6 firmware (< 01.26.00)
• hp elitebook 735 g5 firmware (< 01.26.01)
• hp elitebook 725 g4 firmware (< 1.45)
• hp elitebook 650 15.6 inch g9 notebook pc firmware (< 01.07.00)
• hp elitebook 640 14 inch g9 notebook pc firmware (< 01.07.00)
• hp elitebook 630 13 inch g9 notebook pc firmware (< 01.07.00)
• hp elitebook 1050 g1 firmware (< 01.28.00)
• hp elitebook 1040 g4 firmware (< 1.5)
• hp elitebook 1040 g3 firmware (< 1.6)
• hp elitebook 1040 14 inch g9 notebook pc firmware (< 01.07.00)
• hp elitebook 1030 g1 firmware (< 1.6)
• hp elite x360 1040 14 inch g9 2-in-1 notebook pc firmware (< 01.07.00)
• hp elite x2 g8 tablet firmware (< 01.11.00)
• hp elite x2 g4 firmware 01.26.0
• hp elite x2 1013 g3 firmware 01.28.00
• hp elite x2 1012 g2 firmware 1.48
• hp elite x2 1012 g1 tablet with travel keyboard firmware 1.6
• hp elite x2 1012 g1 tablet firmware 1.6
• hp elite x2 1012 g1 firmware (< 1.6)
• hp elite dragonfly max firmware (< 01.11.00)
• hp elite dragonfly g2 firmware (< 01.11.00)
• hp elite dragonfly 13.5 inch g3 notebook pc firmware (< 01.07.00)
• hp elite dragonfly firmware (< 01.26.00)
• hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware (< 01.07.00)
• hp elitebook 835 g7 firmware (< 01.14.00)
• hp proone 440 g6 24 all-in-one pc firmware (< 02.16.00)
• hp proone 480 g3 20-inch non-touch all-in one pc firmware (< 2.48)
• hp proone 600 g3 21.5-inch non-touch all-in-one pc firmware (< 2.48)
• hp proone 600 g4 21.5-inch touch all-in-one business pc firmware (< 02.29.01)
• hp proone 600 g5 21.5-in all-in-one business pc firmware (< 02.19.00)
• hp proone 600 g6 22 all-in-one pc firmware (< 02.16.00)
• hp z1 entry tower g6 firmware (< 02.16.00)
• hp z1 g8 tower desktop pc firmware (< 02.10.00)
• hp z1 g9 tower desktop pc firmware (< 02.10.05)
• hp zhan 66 pro g3 22 all-in-one pc firmware (< 02.16.00)
• hp zhan 66 pro g3 24 all-in-one pc firmware (< 02.16.00)
• hp zhan 99 pro 23.8 inch g9 all-in-one desktop pc firmware (< 02.10.04)
• hp engage flex pro retail system firmware (< 02.28.00)
• hp engage flex pro-c retail system firmware (< 02.28.00)
• hp engage go 10 mobile system firmware (< 01.11.00)
• hp engage go mobile system firmware (< 01.28.00)
• hp engage one all-in-one system firmware (< 2.48)
• hp engage one pro aio system firmware (< 02.16.00)
• hp mp9 g2 retail system firmware (< 2.61)
• hp mp9 g4 retail system firmware (< 02.29.01)
… and 294 more
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness