Lucene search

K
cve[email protected]CVE-2022-27540
HistoryJun 28, 2024 - 7:15 p.m.

CVE-2022-27540

2024-06-2819:15:03
web.nvd.nist.gov
11
hp
bios
toctou
vulnerability
pc products
arbitrary code execution
denial of service
information disclosure
bios updates

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "HP PC BIOS",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ]
  }
]

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2022-27540