CVE-2022-27541

2023-06-1218:59:18

www.cve.org

bios

toctou

vulnerability

arbitrary code execution

denial of service

information disclosure

AI Score

8.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.

CNA Affected

[
  {
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ],
    "product": "HP PC BIOS",
    "vendor": "HP Inc."
  }
]

References

support.hp.com/us-en/document/ish_7709808-7709835-16/hpsbhf03835