CVEvulnerability
CVE-2022-31638
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-367
Description
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Affected configurations
• hp zcentral 4r workstation firmware (<= 1.24)
• hp z1 all-in-one g3 workstation firmware (<= 1.33)
• hp elitebook 725 g4 firmware (<= 1.42)
• hp elitebook 745 g4 firmware (<= 1.42)
• hp elitebook 755 g4 firmware (<= 1.42)
• hp probook 645 g3 firmware (<= 1.42)
• hp probook 655 g3 firmware (<= 1.42)
• hp mt43 mobile thin client firmware (<= 1.42)
• hp elite x2 1012 g2 firmware (<= 1.43)
• hp elitebook 1040 g4 firmware (<= 1.43)
• hp elitebook 820 g4 firmware (<= 1.43)
• hp elitebook 828 g4 firmware (<= 1.43)
• hp elitebook 840 g4 firmware (<= 1.43)
• hp elitebook 848 g4 firmware (<= 1.43)
• hp elitebook 850 g4 firmware (<= 1.43)
• hp elitebook x360 1020 g2 firmware (<= 1.43)
• hp elitebook x360 1030 g2 firmware (<= 1.43)
• hp pro x2 612 g2 firmware (<= 1.43)
• hp probook 455 g4 firmware (<= 1.43)
• hp probook 640 g3 firmware (<= 1.43)
• hp probook 650 g3 firmware (<= 1.43)
• hp zbook 14u g4 firmware (<= 1.43)
• hp zbook 15 g4 firmware (<= 1.43)
• hp zbook 15u g4 firmware (<= 1.43)
• hp zbook 17 g4 firmware (<= 1.43)
• hp zbook studio g4 firmware (<= 1.43)
• hp zbook x2 g4 firmware (<= 1.43)
• hp probook x360 11 g2 ee firmware (<= 1.45)
• hp elitebook 725 g3 firmware (<= 1.55)
• hp elitebook 745 g3 firmware (<= 1.55)
• hp elitebook 755 g3 firmware (<= 1.55)
• hp probook 455 g3 firmware (<= 1.55)
• hp probook 645 g2 firmware (<= 1.55)
• hp probook 655 g2 firmware (<= 1.55)
• hp elite x2 1012 g1 firmware (<= 1.57)
• hp elite x2 1012 g1 tablet firmware (<= 1.57)
• hp elite x2 1012 g1 tablet with travel keyboard firmware (<= 1.57)
• hp elitebook 1030 g1 firmware (<= 1.57)
• hp elitebook 1040 g3 firmware (<= 1.57)
• hp elitebook 820 g3 firmware (<= 1.57)
• hp elitebook 828 g3 firmware (<= 1.57)
• hp elitebook 840 g3 firmware (<= 1.57)
• hp elitebook 848 g3 firmware (<= 1.57)
• hp elitebook 850 g3 firmware (<= 1.57)
• hp elitebook folio g1 firmware (<= 1.57)
• hp probook 11 ee g2 firmware (<= 1.57)
• hp probook 430 g3 firmware (<= 1.57)
• hp probook 440 g3 firmware (<= 1.57)
• hp probook 446 g3 firmware (<= 1.57)
• hp probook 450 g3 firmware (<= 1.57)
• hp probook 470 g3 firmware (<= 1.57)
• hp probook 640 g2 firmware (<= 1.57)
• hp probook 650 g2 firmware (<= 1.57)
• hp zbook 15 g3 firmware (<= 1.57)
• hp zbook 15u g3 firmware (<= 1.57)
• hp zbook 17 g3 firmware (<= 1.57)
• hp zbook studio g3 firmware (<= 1.57)
• hp z2 mini g3 workstation firmware (<= 1.85)
• hp z238 microtower workstation firmware (<= 1.85)
• hp z240 small form factor workstation firmware (<= 1.85)
… and 343 more
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness
References
- https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814 Broken Link, Vendor Advisory
- https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814 Broken Link, Vendor Advisory