CVE-2022-43778

2023-06-1219:02:30

www.cve.org

bios

time-of-check

time-of-use

arbitrary code execution

denial of service

information disclosure

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.

CNA Affected

[
  {
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ],
    "product": "HP PC BIOS",
    "vendor": "HP Inc."
  }
]

References

support.hp.com/us-en/document/ish_7709808-7709835-16/hpsbhf03835