CVEvulnerability

CVE-2023-26299

7.0 HIGH Published 2023-06-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-367

Description

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.

Affected configurations

• hp 260 g4 desktop mini firmware (< 2.14) • hp t430 firmware (< 00.01.11) • hp t628 firmware (< 00.01.10) • hp 240 g10 firmware (< f.04) • hp 245 g6 firmware (< f.35) • hp 245 g7 firmware (< f.69) • hp 245 g8 firmware (< f.25) • hp 247 g8 firmware (< f.69) • hp 250 g10 firmware (< f.05) • hp 255 g10 firmware (< f.08) • hp 349 g7 firmware (< f.28) • hp 470 g10 firmware (< f.02) • hp 470 g9 firmware (< f.05) • hp zhan 99 g2 firmware (< f.24) • hp zhan 99 g4 firmware (< f.08) • hp vr backpack g2 firmware (< f.28) • hp 200 g3 firmware • hp 200 g4 22 all-in-one firmware • hp 200 pro g4 22 all-in-one firmware • hp 205 g4 22 all-in-one firmware • hp 205 pro g4 22 all-in-one firmware • hp 280 g3 firmware • hp 280 g4 firmware • hp 280 g4 microtower firmware • hp 280 g5 firmware • hp 280 g5 small form factor firmware • hp 280 g6 firmware • hp 280 g8 microtower firmware • hp 280 pro g3 firmware • hp 280 pro g4 microtower firmware • hp 280 pro g5 small form factor firmware • hp 282 g5 firmware • hp 282 g6 firmware • hp 282 pro g4 microtower firmware • hp 288 g5 firmware • hp 288 g6 firmware • hp 288 pro g4 microtower firmware • hp 290 g1 firmware • hp 290 g2 firmware • hp 290 g2 microtower firmware • hp 290 g3 firmware • hp 290 g3 small form factor firmware • hp 290 g4 firmware • hp desktop pro g1 microtower firmware • hp pro small form factor 280 g9 desktop firmware • hp pro small form factor 290 g9 desktop firmware • hp pro small form factor zhan 66 g9 desktop firmware • hp pro tower 200 g9 desktop firmware • hp pro tower 280 g9 desktop firmware • hp pro tower 290 g9 desktop firmware • hp pro tower zhan 99 g9 desktop firmware • hp proone 240 g10 firmware • hp proone 240 g9 firmware • hp proone 440 g3 firmware • hp proone 490 g3 firmware • hp proone 496 g3 firmware • hp z vr backpack g1 workstation firmware • hp zhan 86 pro g2 microtower firmware • hp zhan 99 pro g1 microtower firmware

Related

Weakness · CWE (1)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References