CVEvulnerability

CVE-2024-5477

7.3 HIGH Published 2025-08-13 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.3 HIGH — CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-1256

Description

A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasing firmware mitigation for the potential vulnerability.

Related

Weakness · CWE (1)

  • CWE-1256 Improper Restriction of Software Interfaces to Hardware Features weakness

References