CVEvulnerability
CVE-2022-43777
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-367
Description
Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
Affected configurations
• hp zcentral 4r workstation firmware (<= 1.24)
• hp z1 all-in-one g3 workstation firmware (<= 1.33)
• hp elitebook 725 g4 firmware (<= 1.42)
• hp elitebook 745 g4 firmware (<= 1.42)
• hp elitebook 755 g4 firmware (<= 1.42)
• hp probook 645 g3 firmware (<= 1.42)
• hp probook 655 g3 firmware (<= 1.42)
• hp mt43 mobile thin client firmware (<= 1.42)
• hp elite x2 1012 g2 firmware (<= 1.43)
• hp elitebook 1040 g4 firmware (<= 1.43)
• hp elitebook 820 g4 firmware (<= 1.43)
• hp elitebook 828 g4 firmware (<= 1.43)
• hp elitebook 840 g4 firmware (<= 1.43)
• hp elitebook 848 g4 firmware (<= 1.43)
• hp elitebook 850 g4 firmware (<= 1.43)
• hp elitebook x360 1020 g2 firmware (<= 1.43)
• hp elitebook x360 1030 g2 firmware (<= 1.43)
• hp pro x2 612 g2 firmware (<= 1.43)
• hp probook 455 g4 firmware (<= 1.43)
• hp probook 640 g3 firmware (<= 1.43)
• hp probook 650 g3 firmware (<= 1.43)
• hp zbook 14u g4 firmware (<= 1.43)
• hp zbook 15 g4 firmware (<= 1.43)
• hp zbook 15u g4 firmware (<= 1.43)
• hp zbook 17 g4 firmware (<= 1.43)
• hp zbook studio g4 firmware (<= 1.43)
• hp zbook x2 g4 firmware (<= 1.43)
• hp probook x360 11 g2 ee firmware (<= 1.45)
• hp elitebook 725 g3 firmware (<= 1.55)
• hp elitebook 745 g3 firmware (<= 1.55)
• hp elitebook 755 g3 firmware (<= 1.55)
• hp probook 455 g3 firmware (<= 1.55)
• hp probook 645 g2 firmware (<= 1.55)
• hp probook 655 g2 firmware (<= 1.55)
• hp elite x2 1012 g1 firmware (<= 1.57)
• hp elite x2 1012 g1 tablet firmware (<= 1.57)
• hp elite x2 1012 g1 tablet with travel keyboard firmware (<= 1.57)
• hp elitebook 1030 g1 firmware (<= 1.57)
• hp elitebook 1040 g3 firmware (<= 1.57)
• hp elitebook 820 g3 firmware (<= 1.57)
• hp elitebook 828 g3 firmware (<= 1.57)
• hp elitebook 840 g3 firmware (<= 1.57)
• hp elitebook 848 g3 firmware (<= 1.57)
• hp elitebook 850 g3 firmware (<= 1.57)
• hp elitebook folio g1 firmware (<= 1.57)
• hp probook 11 ee g2 firmware (<= 1.57)
• hp probook 430 g3 firmware (<= 1.57)
• hp probook 440 g3 firmware (<= 1.57)
• hp probook 446 g3 firmware (<= 1.57)
• hp probook 450 g3 firmware (<= 1.57)
• hp probook 470 g3 firmware (<= 1.57)
• hp probook 640 g2 firmware (<= 1.57)
• hp probook 650 g2 firmware (<= 1.57)
• hp zbook 15 g3 firmware (<= 1.57)
• hp zbook 15u g3 firmware (<= 1.57)
• hp zbook 17 g3 firmware (<= 1.57)
• hp zbook studio g3 firmware (<= 1.57)
• hp z2 mini g3 workstation firmware (<= 1.85)
• hp z238 microtower workstation firmware (<= 1.85)
• hp z240 small form factor workstation firmware (<= 1.85)
… and 327 more
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness
References
- https://support.hp.com/us-en/document/ish_7709808-7709835-16/hpsbhf03835 Broken Link, Vendor Advisory
- https://support.hp.com/us-en/document/ish_7709808-7709835-16/hpsbhf03835 Broken Link, Vendor Advisory