Search
Find a vulnerability
Search criteria
2 vulnerabilities found for workstations by hp_inc
CVE-2023-5410 (GCVE-0-2023-5410)
Vulnerability from nvd – Published: 2024-03-12 20:01 – Updated: 2024-11-12 20:34
VLAI
EPSS
VEX
Summary
A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-23 14:04 UTC
CWE
- CWE-203 - Observable Discrepancy
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| HP Inc. | HP PC BIOS |
Affected:
See HP Security Bulletin reference for affected versions
|
|
| hp_inc | business_notebook_pcs |
Affected:
1.03.01 , ≤ 1.15.01
(custom)
cpe:2.3:o:hp_inc:business_notebook_pcs:*:*:*:*:*:*:*:* |
|
| hp_inc | business_desktop_pcs |
Affected:
2.12.02 , ≤ 2.12.03
(custom)
cpe:2.3:o:hp_inc:business_desktop_pcs:*:*:*:*:*:*:*:* |
|
| hp_inc | workstations |
Affected:
2.04.02
cpe:2.3:o:hp_inc:workstations:*:*:*:*:*:*:*:* |
|
| hp_inc | thin_client |
Affected:
1.09.01 , ≤ 1.15.01
(custom)
cpe:2.3:o:hp_inc:thin_client:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:hp_inc:business_notebook_pcs:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "business_notebook_pcs",
"vendor": "hp_inc",
"versions": [
{
"lessThanOrEqual": "1.15.01",
"status": "affected",
"version": "1.03.01",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:hp_inc:business_desktop_pcs:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "business_desktop_pcs",
"vendor": "hp_inc",
"versions": [
{
"lessThanOrEqual": "2.12.03",
"status": "affected",
"version": "2.12.02",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:hp_inc:workstations:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workstations",
"vendor": "hp_inc",
"versions": [
{
"status": "affected",
"version": "2.04.02"
}
]
},
{
"cpes": [
"cpe:2.3:o:hp_inc:thin_client:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thin_client",
"vendor": "hp_inc",
"versions": [
{
"lessThanOrEqual": "1.15.01",
"status": "affected",
"version": "1.09.01",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-5410",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-23T14:04:36.871281Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-203",
"description": "CWE-203 Observable Discrepancy",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-12T20:34:15.291Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T07:59:44.777Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "HP PC BIOS",
"vendor": "HP Inc.",
"versions": [
{
"status": "affected",
"version": "See HP Security Bulletin reference for affected versions"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability."
}
],
"providerMetadata": {
"dateUpdated": "2024-03-12T20:01:46.531Z",
"orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
"shortName": "hp"
},
"references": [
{
"url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
"assignerShortName": "hp",
"cveId": "CVE-2023-5410",
"datePublished": "2024-03-12T20:01:46.531Z",
"dateReserved": "2023-10-04T18:22:43.127Z",
"dateUpdated": "2024-11-12T20:34:15.291Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-5410 (GCVE-0-2023-5410)
Vulnerability from cvelistv5 – Published: 2024-03-12 20:01 – Updated: 2024-11-12 20:34
VLAI
EPSS
VEX
Summary
A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-23 14:04 UTC
CWE
- CWE-203 - Observable Discrepancy
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| HP Inc. | HP PC BIOS |
Affected:
See HP Security Bulletin reference for affected versions
|
|
| hp_inc | business_notebook_pcs |
Affected:
1.03.01 , ≤ 1.15.01
(custom)
cpe:2.3:o:hp_inc:business_notebook_pcs:*:*:*:*:*:*:*:* |
|
| hp_inc | business_desktop_pcs |
Affected:
2.12.02 , ≤ 2.12.03
(custom)
cpe:2.3:o:hp_inc:business_desktop_pcs:*:*:*:*:*:*:*:* |
|
| hp_inc | workstations |
Affected:
2.04.02
cpe:2.3:o:hp_inc:workstations:*:*:*:*:*:*:*:* |
|
| hp_inc | thin_client |
Affected:
1.09.01 , ≤ 1.15.01
(custom)
cpe:2.3:o:hp_inc:thin_client:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:hp_inc:business_notebook_pcs:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "business_notebook_pcs",
"vendor": "hp_inc",
"versions": [
{
"lessThanOrEqual": "1.15.01",
"status": "affected",
"version": "1.03.01",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:hp_inc:business_desktop_pcs:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "business_desktop_pcs",
"vendor": "hp_inc",
"versions": [
{
"lessThanOrEqual": "2.12.03",
"status": "affected",
"version": "2.12.02",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:hp_inc:workstations:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workstations",
"vendor": "hp_inc",
"versions": [
{
"status": "affected",
"version": "2.04.02"
}
]
},
{
"cpes": [
"cpe:2.3:o:hp_inc:thin_client:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thin_client",
"vendor": "hp_inc",
"versions": [
{
"lessThanOrEqual": "1.15.01",
"status": "affected",
"version": "1.09.01",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-5410",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-23T14:04:36.871281Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-203",
"description": "CWE-203 Observable Discrepancy",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-12T20:34:15.291Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T07:59:44.777Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "HP PC BIOS",
"vendor": "HP Inc.",
"versions": [
{
"status": "affected",
"version": "See HP Security Bulletin reference for affected versions"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability."
}
],
"providerMetadata": {
"dateUpdated": "2024-03-12T20:01:46.531Z",
"orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
"shortName": "hp"
},
"references": [
{
"url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
"assignerShortName": "hp",
"cveId": "CVE-2023-5410",
"datePublished": "2024-03-12T20:01:46.531Z",
"dateReserved": "2023-10-04T18:22:43.127Z",
"dateUpdated": "2024-11-12T20:34:15.291Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}