Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner

Sources

Sort by

Order

Apply ordering (override relevance)

CVE-2022-31646 (GCVE-0-2022-31646)

Vulnerability from nvd – Published: 2023-06-14 17:07 – Updated: 2024-12-30 15:01

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-863 - Incorrect Authorization

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:26:00.896Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-31646",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-30T15:01:37.405808Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-30T15:01:46.211Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-14T17:07:52.139Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-31646",
    "datePublished": "2023-06-14T17:07:52.139Z",
    "dateReserved": "2022-05-25T21:05:10.868Z",
    "dateUpdated": "2024-12-30T15:01:46.211Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-31645 (GCVE-0-2022-31645)

Vulnerability from nvd – Published: 2023-06-14 17:07 – Updated: 2024-12-30 15:09

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:26:00.999Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-31645",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-30T15:09:15.609954Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-30T15:09:21.775Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. "
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-14T17:07:00.373Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-31645",
    "datePublished": "2023-06-14T17:07:00.373Z",
    "dateReserved": "2022-05-25T21:05:10.868Z",
    "dateUpdated": "2024-12-30T15:09:21.775Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-31644 (GCVE-0-2022-31644)

Vulnerability from nvd – Published: 2023-06-14 17:06 – Updated: 2024-12-30 15:13

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-863 - Incorrect Authorization

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:26:00.855Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-31644",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-30T15:13:52.895157Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-30T15:13:57.891Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-14T17:06:30.332Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-31644",
    "datePublished": "2023-06-14T17:06:30.332Z",
    "dateReserved": "2022-05-25T21:05:10.868Z",
    "dateUpdated": "2024-12-30T15:13:57.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27538 (GCVE-0-2022-27538)

Vulnerability from nvd – Published: 2023-01-30 20:41 – Updated: 2025-03-27 19:04

Summary

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

n/a
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_7387020…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:32:59.293Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_7387020-7387107-16/hpsbhf03827"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-27538",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-27T19:04:11.152615Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-367",
                "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-27T19:04:44.066Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-01T06:15:59.102Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_7387020-7387107-16/hpsbhf03827"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-27538",
    "datePublished": "2023-01-30T20:41:26.690Z",
    "dateReserved": "2022-03-21T21:15:05.750Z",
    "dateUpdated": "2025-03-27T19:04:44.066Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27537 (GCVE-0-2022-27537)

Vulnerability from nvd – Published: 2023-01-30 21:26 – Updated: 2025-03-27 15:23

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

n/a
CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:32:59.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-27537",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-27T15:21:15.511462Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-27T15:23:56.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-01T06:15:59.102Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-27537",
    "datePublished": "2023-01-30T21:26:11.879Z",
    "dateReserved": "2022-03-21T21:15:05.750Z",
    "dateUpdated": "2025-03-27T15:23:56.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39301 (GCVE-0-2021-39301)

Vulnerability from nvd – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:41.737Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:12.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39301",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39301",
    "datePublished": "2022-02-16T16:38:12.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:41.737Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39300 (GCVE-0-2021-39300)

Vulnerability from nvd – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:42.454Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:13.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39300",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39300",
    "datePublished": "2022-02-16T16:38:13.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:42.454Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39299 (GCVE-0-2021-39299)

Vulnerability from nvd – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:41.526Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:13.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39299",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39299",
    "datePublished": "2022-02-16T16:38:13.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:41.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39298 (GCVE-0-2021-39298)

Vulnerability from nvd – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

Severity

No CVSS data available.

CWE

n/a

Assigner

AMD

References

2 references

URL	Tags
https://www.amd.com/en/corporate/product-security…	vendor-advisory
https://www.amd.com/en/corporate/product-security…

Impacted products

5 products

Vendor	Product	Version
AMD	2nd Gen EPYC	Affected: Various
AMD	3rd Gen EPYC	Affected: various
AMD	Ryzen 2000 Series	Affected: various
AMD	Ryzen 3000 Series	Affected: Various
AMD	Ryzen 5000 Series	Affected: various

Date Public

2023-01-10 17:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:42.610Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "2nd Gen EPYC",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "Various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "3rd Gen EPYC",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen 2000 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen 3000 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "Various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen 5000 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "datePublic": "2023-01-10T17:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-11T07:01:59.843Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032"
        },
        {
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027"
        }
      ],
      "source": {
        "advisory": "AMD-SB-1032",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2021-39298",
    "datePublished": "2022-02-16T16:38:10.726Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:42.610Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39297 (GCVE-0-2021-39297)

Vulnerability from nvd – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:42.219Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:11.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39297",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39297",
    "datePublished": "2022-02-16T16:38:11.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:42.219Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-31646 (GCVE-0-2022-31646)

Vulnerability from cvelistv5 – Published: 2023-06-14 17:07 – Updated: 2024-12-30 15:01

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-863 - Incorrect Authorization

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:26:00.896Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-31646",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-30T15:01:37.405808Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-30T15:01:46.211Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-14T17:07:52.139Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-31646",
    "datePublished": "2023-06-14T17:07:52.139Z",
    "dateReserved": "2022-05-25T21:05:10.868Z",
    "dateUpdated": "2024-12-30T15:01:46.211Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-31645 (GCVE-0-2022-31645)

Vulnerability from cvelistv5 – Published: 2023-06-14 17:07 – Updated: 2024-12-30 15:09

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:26:00.999Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-31645",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-30T15:09:15.609954Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-30T15:09:21.775Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. "
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-14T17:07:00.373Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-31645",
    "datePublished": "2023-06-14T17:07:00.373Z",
    "dateReserved": "2022-05-25T21:05:10.868Z",
    "dateUpdated": "2024-12-30T15:09:21.775Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-31644 (GCVE-0-2022-31644)

Vulnerability from cvelistv5 – Published: 2023-06-14 17:06 – Updated: 2024-12-30 15:13

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-863 - Incorrect Authorization

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:26:00.855Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-31644",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-30T15:13:52.895157Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-30T15:13:57.891Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-14T17:06:30.332Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-31644",
    "datePublished": "2023-06-14T17:06:30.332Z",
    "dateReserved": "2022-05-25T21:05:10.868Z",
    "dateUpdated": "2024-12-30T15:13:57.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27537 (GCVE-0-2022-27537)

Vulnerability from cvelistv5 – Published: 2023-01-30 21:26 – Updated: 2025-03-27 15:23

Summary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

n/a
CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_6664419…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:32:59.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-27537",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-27T15:21:15.511462Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-27T15:23:56.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-01T06:15:59.102Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-27537",
    "datePublished": "2023-01-30T21:26:11.879Z",
    "dateReserved": "2022-03-21T21:15:05.750Z",
    "dateUpdated": "2025-03-27T15:23:56.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27538 (GCVE-0-2022-27538)

Vulnerability from cvelistv5 – Published: 2023-01-30 20:41 – Updated: 2025-03-27 19:04

Summary

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

n/a
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_7387020…

Impacted products

1 product

Vendor	Product	Version
HP Inc.	HP PC BIOS	Affected: See HP Security Bulletin reference for affected versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:32:59.293Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_7387020-7387107-16/hpsbhf03827"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-27538",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-27T19:04:11.152615Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-367",
                "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-27T19:04:44.066Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-01T06:15:59.102Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_7387020-7387107-16/hpsbhf03827"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.13"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2022-27538",
    "datePublished": "2023-01-30T20:41:26.690Z",
    "dateReserved": "2022-03-21T21:15:05.750Z",
    "dateUpdated": "2025-03-27T19:04:44.066Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39300 (GCVE-0-2021-39300)

Vulnerability from cvelistv5 – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:42.454Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:13.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39300",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39300",
    "datePublished": "2022-02-16T16:38:13.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:42.454Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39299 (GCVE-0-2021-39299)

Vulnerability from cvelistv5 – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:41.526Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:13.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39299",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39299",
    "datePublished": "2022-02-16T16:38:13.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:41.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39301 (GCVE-0-2021-39301)

Vulnerability from cvelistv5 – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:41.737Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:12.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39301",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39301",
    "datePublished": "2022-02-16T16:38:12.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:41.737Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39297 (GCVE-0-2021-39297)

Vulnerability from cvelistv5 – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Severity

No CVSS data available.

CWE

Arbitrary Code Execution; Escalation of Privilege

Assigner

hp

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_5661066…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS	Affected: before 01.12.00 Affected: before 01.08.00 Affected: before 01.19.00 Affected: before 01.08.02 Affected: before 01.08.01 Affected: before 02.17.00 Affected: before 02.18.00 Affected: before 02.12.00 Affected: before 02.10.00 Affected: before 02.07.00 Affected: before 02.03.00 Affected: before 02.75 Affected: before 2.58

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:42.219Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before 01.12.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.00"
            },
            {
              "status": "affected",
              "version": "before 01.19.00"
            },
            {
              "status": "affected",
              "version": "before 01.08.02"
            },
            {
              "status": "affected",
              "version": "before 01.08.01"
            },
            {
              "status": "affected",
              "version": "before 02.17.00"
            },
            {
              "status": "affected",
              "version": "before 02.18.00"
            },
            {
              "status": "affected",
              "version": "before 02.12.00"
            },
            {
              "status": "affected",
              "version": "before 02.10.00"
            },
            {
              "status": "affected",
              "version": "before 02.07.00"
            },
            {
              "status": "affected",
              "version": "before 02.03.00"
            },
            {
              "status": "affected",
              "version": "before 02.75"
            },
            {
              "status": "affected",
              "version": "before 2.58"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary Code Execution; Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-16T16:38:11.000Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2021-39297",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 01.12.00"
                          },
                          {
                            "version_value": "before 01.08.00"
                          },
                          {
                            "version_value": "before 01.19.00"
                          },
                          {
                            "version_value": "before 01.08.02"
                          },
                          {
                            "version_value": "before 01.08.01"
                          },
                          {
                            "version_value": "before 02.17.00"
                          },
                          {
                            "version_value": "before 02.18.00"
                          },
                          {
                            "version_value": "before 02.12.00"
                          },
                          {
                            "version_value": "before 02.10.00"
                          },
                          {
                            "version_value": "before 02.07.00"
                          },
                          {
                            "version_value": "before 02.03.00"
                          },
                          {
                            "version_value": "before 02.75"
                          },
                          {
                            "version_value": "before 2.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Arbitrary Code Execution; Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hp.com/us-en/document/ish_5661066-5661090-16",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_5661066-5661090-16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2021-39297",
    "datePublished": "2022-02-16T16:38:11.000Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:42.219Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39298 (GCVE-0-2021-39298)

Vulnerability from cvelistv5 – Published: 2022-02-16 16:38 – Updated: 2024-08-04 02:06

Summary

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

Severity

No CVSS data available.

CWE

n/a

Assigner

AMD

References

2 references

URL	Tags
https://www.amd.com/en/corporate/product-security…	vendor-advisory
https://www.amd.com/en/corporate/product-security…

Impacted products

5 products

Vendor	Product	Version
AMD	2nd Gen EPYC	Affected: Various
AMD	3rd Gen EPYC	Affected: various
AMD	Ryzen 2000 Series	Affected: various
AMD	Ryzen 3000 Series	Affected: Various
AMD	Ryzen 5000 Series	Affected: various

Date Public

2023-01-10 17:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:06:42.610Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "2nd Gen EPYC",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "Various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "3rd Gen EPYC",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen 2000 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen 3000 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "Various"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen 5000 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "datePublic": "2023-01-10T17:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-11T07:01:59.843Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032"
        },
        {
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027"
        }
      ],
      "source": {
        "advisory": "AMD-SB-1032",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2021-39298",
    "datePublished": "2022-02-16T16:38:10.726Z",
    "dateReserved": "2021-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:06:42.610Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria

20 vulnerabilities found for z1_entry_tower_g5_workstation_firmware by hp

CVE-2022-31646 (GCVE-0-2022-31646)

CVE-2022-31645 (GCVE-0-2022-31645)

CVE-2022-31644 (GCVE-0-2022-31644)

CVE-2022-27538 (GCVE-0-2022-27538)

CVE-2022-27537 (GCVE-0-2022-27537)

CVE-2021-39301 (GCVE-0-2021-39301)

CVE-2021-39300 (GCVE-0-2021-39300)

CVE-2021-39299 (GCVE-0-2021-39299)

CVE-2021-39298 (GCVE-0-2021-39298)

CVE-2021-39297 (GCVE-0-2021-39297)

CVE-2022-31646 (GCVE-0-2022-31646)

CVE-2022-31645 (GCVE-0-2022-31645)

CVE-2022-31644 (GCVE-0-2022-31644)

CVE-2022-27537 (GCVE-0-2022-27537)

CVE-2022-27538 (GCVE-0-2022-27538)

CVE-2021-39300 (GCVE-0-2021-39300)

CVE-2021-39299 (GCVE-0-2021-39299)

CVE-2021-39301 (GCVE-0-2021-39301)

CVE-2021-39297 (GCVE-0-2021-39297)

CVE-2021-39298 (GCVE-0-2021-39298)