CVEvulnerability

CVE-2022-43778

7.8 HIGH Published 2023-06-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-367

Description

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.

Affected configurations

• hp zcentral 4r workstation firmware (<= 1.24) • hp z1 all-in-one g3 workstation firmware (<= 1.33) • hp elitebook 725 g4 firmware (<= 1.42) • hp elitebook 745 g4 firmware (<= 1.42) • hp elitebook 755 g4 firmware (<= 1.42) • hp probook 645 g3 firmware (<= 1.42) • hp probook 655 g3 firmware (<= 1.42) • hp mt43 mobile thin client firmware (<= 1.42) • hp elite x2 1012 g2 firmware (<= 1.43) • hp elitebook 1040 g4 firmware (<= 1.43) • hp elitebook 820 g4 firmware (<= 1.43) • hp elitebook 828 g4 firmware (<= 1.43) • hp elitebook 840 g4 firmware (<= 1.43) • hp elitebook 848 g4 firmware (<= 1.43) • hp elitebook 850 g4 firmware (<= 1.43) • hp elitebook x360 1020 g2 firmware (<= 1.43) • hp elitebook x360 1030 g2 firmware (<= 1.43) • hp pro x2 612 g2 firmware (<= 1.43) • hp probook 455 g4 firmware (<= 1.43) • hp probook 640 g3 firmware (<= 1.43) • hp probook 650 g3 firmware (<= 1.43) • hp zbook 14u g4 firmware (<= 1.43) • hp zbook 15 g4 firmware (<= 1.43) • hp zbook 15u g4 firmware (<= 1.43) • hp zbook 17 g4 firmware (<= 1.43) • hp zbook studio g4 firmware (<= 1.43) • hp zbook x2 g4 firmware (<= 1.43) • hp probook x360 11 g2 ee firmware (<= 1.45) • hp elitebook 725 g3 firmware (<= 1.55) • hp elitebook 745 g3 firmware (<= 1.55) • hp elitebook 755 g3 firmware (<= 1.55) • hp probook 455 g3 firmware (<= 1.55) • hp probook 645 g2 firmware (<= 1.55) • hp probook 655 g2 firmware (<= 1.55) • hp elite x2 1012 g1 firmware (<= 1.57) • hp elite x2 1012 g1 tablet firmware (<= 1.57) • hp elite x2 1012 g1 tablet with travel keyboard firmware (<= 1.57) • hp elitebook 1030 g1 firmware (<= 1.57) • hp elitebook 1040 g3 firmware (<= 1.57) • hp elitebook 820 g3 firmware (<= 1.57) • hp elitebook 828 g3 firmware (<= 1.57) • hp elitebook 840 g3 firmware (<= 1.57) • hp elitebook 848 g3 firmware (<= 1.57) • hp elitebook 850 g3 firmware (<= 1.57) • hp elitebook folio g1 firmware (<= 1.57) • hp probook 11 ee g2 firmware (<= 1.57) • hp probook 430 g3 firmware (<= 1.57) • hp probook 440 g3 firmware (<= 1.57) • hp probook 446 g3 firmware (<= 1.57) • hp probook 450 g3 firmware (<= 1.57) • hp probook 470 g3 firmware (<= 1.57) • hp probook 640 g2 firmware (<= 1.57) • hp probook 650 g2 firmware (<= 1.57) • hp zbook 15 g3 firmware (<= 1.57) • hp zbook 15u g3 firmware (<= 1.57) • hp zbook 17 g3 firmware (<= 1.57) • hp zbook studio g3 firmware (<= 1.57) • hp z2 mini g3 workstation firmware (<= 1.85) • hp z238 microtower workstation firmware (<= 1.85) • hp z240 small form factor workstation firmware (<= 1.85) … and 327 more

Related

Weakness · CWE (1)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References