CVE-2017-2751

2018-10-0320:00:00

www.cve.org

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.

CNA Affected

[
  {
    "product": "HP 240 G1 Notebook PC and certain other consumer notebooks",
    "vendor": "HP Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "F.22 and other firmware versions"
      }
    ]
  }
]

References

support.hp.com/us-en/document/c05913581