CVE-2023-26299

🗓️ 30 Jun 2023 15:40:10Reported by hpType

A TOCTOU vulnerability identified in HP PC products using AMI UEFI Firmwar

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-26299	30 Jun 202320:15	–	circl
CNNVD	HP PC 安全漏洞	30 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-26299	30 Jun 202315:40	–	cvelist
EUVD	EUVD-2023-30122	3 Oct 202520:07	–	euvd
Hewlett-Packard	AMI UEFI Firmware June 2023 Security Update (TOCTOU)	20 Jun 202300:00	–	hp
NVD	CVE-2023-26299	30 Jun 202316:15	–	nvd
OSV	CVE-2023-26299	30 Jun 202316:15	–	osv
Prion	Design/Logic Flaw	30 Jun 202316:15	–	prion
Positive Technologies	PT-2023-20596 · Ami · Ami Uefi Firmware	30 Jun 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-26299	23 May 202505:39	–	redhatcve

NVD

Node

hp 260_g4_desktop_mini_firmwareRange<2.14

AND

hp 260_g4_desktop_miniMatch-

Node

hp t430_firmwareRange<00.01.11

AND

hp t430Match-

Node

hp t628_firmwareRange<00.01.10

AND

hp t628Match-

Node

hp 240_g10_firmwareRange<f.04

AND

hp 240_g10Match-

Node

hp 245_g6_firmwareRange<f.35

AND

hp 245_g6Match-

Node

hp 245_g7_firmwareRange<f.69

AND

hp 245_g7Match-

Node

hp 245_g8_firmwareRange<f.25

AND

hp 245_g8Match-

Node

hp 247_g8_firmwareRange<f.69

AND

hp 247_g8Match-

Node

hp 250_g10_firmwareRange<f.05

AND

hp 250_g10Match-

Node

hp 255_g10_firmwareRange<f.08

AND

hp 255_g10Match-

Node

hp 349_g7_firmwareRange<f.28

AND

hp 349_g7Match-

Node

hp 470_g10_firmwareRange<f.02

AND

hp 470_g10Match-

Node

hp 470_g9_firmwareRange<f.05

AND

hp 470_g9Match-

Node

hp zhan_99_g2_firmwareRange<f.24

AND

hp zhan_99_g2Match-

Node

hp zhan_99_g4_firmwareRange<f.08

AND

hp zhan_99_g4Match-

Node

hp vr_backpack_g2_firmwareRange<f.28

AND

hp vr_backpack_g2Match-

Node

hp 200_g3_firmwareMatch-

AND

hp 200_g3Match-

Node

hp 200_g4_22_all-in-one_firmwareMatch-

AND

hp 200_g4_22_all-in-oneMatch-

Node

hp 200_pro_g4_22_all-in-one_firmwareMatch-

AND

hp 200_pro_g4_22_all-in-oneMatch-

Node

hp 205_g4_22_all-in-one_firmwareMatch-

AND

hp 205_g4_22_all-in-oneMatch-

Node

hp 205_pro_g4_22_all-in-one_firmwareMatch-

AND

hp 205_pro_g4_22_all-in-oneMatch-

Node

hp 280_g3_firmwareMatch-

AND

hp 280_g3Match-

Node

hp 280_g4_firmwareMatch-

AND

hp 280_g4Match-

Node

hp 280_g4_microtower_firmwareMatch-

AND

hp 280_g4_microtowerMatch-

Node

hp 280_g5_firmwareMatch-

AND

hp 280_g5Match-

Node

hp 280_g5_small_form_factor_firmwareMatch-

AND

hp 280_g5_small_form_factorMatch-

Node

hp 280_g6_firmwareMatch-

AND

hp 280_g6Match-

Node

hp 280_g8_microtower_firmwareMatch-

AND

hp 280_g8_microtowerMatch-

Node

hp 280_pro_g3_firmwareMatch-

AND

hp 280_pro_g3Match-

Node

hp 280_pro_g4_microtower_firmwareMatch-

AND

hp 280_pro_g4_microtowerMatch-

Node

hp 280_pro_g5_small_form_factor_firmwareMatch-

AND

hp 280_pro_g5_small_form_factorMatch-

Node

hp 282_g5_firmwareMatch-

AND

hp 282_g5Match-

Node

hp 282_g6_firmwareMatch-

AND

hp 282_g6Match-

Node

hp 282_pro_g4_microtower_firmwareMatch-

AND

hp 282_pro_g4_microtowerMatch-

Node

hp 288_g5_firmwareMatch-

AND

hp 288_g5Match-

Node

hp 288_g6_firmwareMatch-

AND

hp 288_g6Match-

Node

hp 288_pro_g4_microtower_firmwareMatch-

AND

hp 288_pro_g4_microtowerMatch-

Node

hp 290_g1_firmwareMatch-

AND

hp 290_g1Match-

Node

hp 290_g2_firmwareMatch-

AND

hp 290_g2Match-

Node

hp 290_g2_microtower_firmwareMatch-

AND

hp 290_g2_microtowerMatch-

Node

hp 290_g3_firmwareMatch-

AND

hp 290_g3Match-

Node

hp 290_g3_small_form_factor_firmwareMatch-

AND

hp 290_g3_small_form_factorMatch-

Node

hp 290_g4_firmwareMatch-

AND

hp 290_g4Match-

Node

hp desktop_pro_g1_microtower_firmwareMatch-

AND

hp desktop_pro_g1_microtowerMatch-

Node

hp pro_small_form_factor_280_g9_desktop_firmwareMatch-

AND

hp pro_small_form_factor_280_g9_desktopMatch-

Node

hp pro_small_form_factor_290_g9_desktop_firmwareMatch-

AND

hp pro_small_form_factor_290_g9_desktopMatch-

Node

hp pro_small_form_factor_zhan_66_g9_desktop_firmwareMatch-

AND

hp pro_small_form_factor_zhan_66_g9_desktopMatch-

Node

hp pro_tower_200_g9_desktop_firmwareMatch-

AND

hp pro_tower_200_g9_desktopMatch-

Node

hp pro_tower_280_g9_desktop_firmwareMatch-

AND

hp pro_tower_280_g9_desktopMatch-

Node

hp pro_tower_290_g9_desktop_firmwareMatch-

AND

hp pro_tower_290_g9_desktopMatch-

Node

hp pro_tower_zhan_99_g9_desktop_firmwareMatch-

AND

hp pro_tower_zhan_99_g9_desktopMatch-

Node

hp proone_240_g10_firmwareMatch-

AND

hp proone_240_g10Match-

Node

hp proone_240_g9_firmwareMatch-

AND

hp proone_240_g9Match-

Node

hp proone_440_g3_firmwareMatch-

AND

hp proone_440_g3Match-

Node

hp proone_490_g3_firmwareMatch-

AND

hp proone_490_g3Match-

Node

hp proone_496_g3_firmwareMatch-

AND

hp proone_496_g3Match-

Node

hp z_vr_backpack_g1_workstation_firmwareMatch-

AND

hp z_vr_backpack_g1_workstationMatch-

Node

hp zhan_86_pro_g2_microtower_firmwareMatch-

AND

hp zhan_86_pro_g2_microtowerMatch-

Node

hp zhan_99_pro_g1_microtower_firmwareMatch-

AND

hp zhan_99_pro_g1_microtowerMatch-

[
  {
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ],
    "product": "HP PC products using AMI UEFI Firmware",
    "vendor": "HP Inc."
  }
]

Source	Link
support	www.support.hp.com/us-en/document/ish_8642715-8642746-16/hpsbhf03850

21 Nov 2024 07:51Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17

EPSS0.00186

SSVC

CWE-367

cve-2023-26299 toctou vulnerability hp pc products ami uefi firmware arbitrary code execution nvd