Lucene search

HP Product Security Response TeamHPSBHF03820

HistoryNov 10, 2022 - 12:00 a.m.

HP PC BIOS November 2022 Security Update for Potential Stack Buffer Overflow

2022-11-1000:00:00

HP Product Security Response Team

support.hp.com

bios

security

update

vulnerability

firmware

escalation

privileges

code execution

softpaqs

platforms

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.5%

JSON

A potential vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.

Affected configurations

Vulners

Node

hpelite_x2_1012_g1_firmwareRange<01.58

hpelite_x2_1012_g1_tablet_firmwareRange<01.58

hpelite_x2_1012_g1_tablet_with_travel_keyboard_firmwareRange<01.58

hpelite_x2_1012_g2_firmwareRange<01.44

hpelitebook_1030_g1_firmwareRange<01.58

hpelitebook_1040_g3_firmwareRange<01.58

hpelitebook_1040_g4_firmwareRange<01.44

hpelitebook_820_g3_firmwareRange<01.58

hpelitebook_820_g4_firmwareRange<01.44

hpelitebook_828_g3_firmwareRange<01.58

hpelitebook_828_g4_firmwareRange<01.44

hpelitebook_840_g3_firmwareRange<01.58

hpelitebook_840_g4_firmwareRange<01.44

hpelitebook_848_g3_firmwareRange<01.58

hpelitebook_848_g4_firmwareRange<01.44

hpelitebook_850_g3_firmwareRange<01.58

hpelitebook_850_g4_firmwareRange<01.44

hpelitebook_folio_g1_firmwareRange<01.58

hpelitebook_x360_1020_g2_firmwareRange<01.44

hpelitebook_x360_1030_g2_firmwareRange<01.44

hppro_x2_612_g2_firmwareRange<01.44

hpprobook_11_ee_g2_firmwareRange<01.58

hpprobook_430_g4_firmwareRange<01.44

hpprobook_440_g3_firmwareRange<01.58

hpprobook_440_g4_firmwareRange<01.44

hpprobook_446_g3_firmwareRange<01.58

hpprobook_450_g4_firmwareRange<01.44

hpprobook_470_g3_firmwareRange<01.58

hpprobook_470_g4_firmwareRange<01.44

hpprobook_640_g2_firmwareRange<01.58

hpprobook_640_g3_firmwareRange<01.44

hpprobook_650_g2_firmwareRange<01.58

hpprobook_650_g3_firmwareRange<01.44

hpprobook_x360_11_g2_ee_firmwareRange<1.46

hpzbook_14u_g4_firmwareRange<01.44

hpzbook_15_g3_firmwareRange<01.58

hpzbook_15_g4_firmwareRange<01.44

hpzbook_15u_g3_firmwareRange<01.58

hpzbook_15u_g4_firmwareRange<01.44

hpzbook_17_g3_firmwareRange<01.58

hpzbook_17_g4_firmwareRange<01.44

hpzbook_studio_g3_firmwareRange<01.58

hpzbook_studio_g4_firmwareRange<01.44

hpzbook_x2_g4_firmwareRange<01.44

hpelite_slice_firmwareRange<02.59

hpelite_slice_for_meeting_rooms_firmwareRange<02.59

hpelitedesk_800_35w_g2_desktop_mini_pc_firmwareRange<02.59

hpelitedesk_800_35w_g3_desktop_mini_pc_firmwareRange<02.44

hpelitedesk_800_65w_g2_desktop_mini_pc_firmwareRange<02.59

hpelitedesk_800_65w_g3_desktop_mini_pc_firmwareRange<02.44

hpelitedesk_800_g2_small_form_factor_pc_firmwareRange<02.59

hpeliteone_800_g2_23-inch_non-touch_all-in-one_pc_firmwareRange<02.59

hpeliteone_800_g2_23-inch_touch_all-in-one_pc_firmwareRange<02.59

hpeliteone_800_g3_23.8_non-touch_healthcare_edition_all-in-one_business_pc_firmwareRange<02.44

hpeliteone_800_g3_23.8-inch_non-touch_all-in-one_pc_firmwareRange<02.44

hpeliteone_800_g3_23.8-inch_non-touch_gpu_all-in-one_pc_firmwareRange<02.44

hpeliteone_800_g3_23.8-inch_touch_all-in-one_pc_firmwareRange<02.44

hpeliteone_800_g3_23.8-inch_touch_gpu_all-in-one_pc_firmwareRange<02.44

hpprodesk_400_g3_desktop_mini_pc_firmwareRange<02.44

hpprodesk_400_g4_microtower_pc_firmwareRange<02.44

hpprodesk_400_g4_small_form_factor_pc_firmwareRange<02.44

hpprodesk_480_g4_microtower_pc_firmwareRange<02.44

hpprodesk_600_g2_desktop_mini_pc_firmwareRange<02.59

hpprodesk_600_g2_microtower_pc_firmwareRange<02.59

hpprodesk_600_g2_small_form_factor_pc_firmwareRange<02.59

hpprodesk_600_g3_desktop_mini_pc_firmwareRange<02.44

hpprodesk_600_g3_microtower_pc_firmwareRange<02.44

hpprodesk_600_g3_small_form_factor_pc_firmwareRange<02.44

hpprodesk_680_g2_microtower_pc_firmwareRange<02.59

hpprodesk_680_g3_microtower_pc_firmwareRange<02.44

hpproone_400_g2_20-inch_non-touch_all-in-one_pc_firmwareRange<02.59

hpproone_400_g2_20-inch_touch_all-in-one_pc_firmwareRange<02.59

hpproone_400_g3_20-inch_non-touch_all-in-one_pc_firmwareRange<02.44

hpproone_400_g3_20-inch_touch_all-in-one_pc_firmwareRange<02.44

hpproone_480_g3_20-inch_non-touch_all-in_one_pc_firmwareRange<02.44

hpproone_600_g2_21.5-inch_non-touch_all-in-one_pc_firmwareRange<02.59

hpproone_600_g2_21.5-inch_touch_all-in-one_pc_firmwareRange<02.59

hpproone_600_g3_21.5-inch_non-touch_all-in-one_pc_firmwareRange<02.44

hpengage_one_all-in-one_system_firmwareRange<02.44

hpmp9_g2_retail_system_firmwareRange<02.59

hprp9_g1_retail_system_firmwareRange<02.59

hpz1_all-in-one_g3_workstation_firmwareRange<01.33

hpz2_mini_g3_workstation_firmwareRange<01.85

hpz238_microtower_workstation_firmwareRange<01.85

hpz240_small_form_factor_workstation_firmwareRange<01.85

hpz240_tower_workstation_firmwareRange<01.85

hpmt20_thin_client_firmwareRange<01.44

VendorProductVersionCPE
hpelite_x2_1012_g1_firmware*cpe:2.3:o:hp:elite_x2_1012_g1_firmware:*:*:*:*:*:*:*:*
hpelite_x2_1012_g1_tablet_firmware*cpe:2.3:o:hp:elite_x2_1012_g1_tablet_firmware:*:*:*:*:*:*:*:*
hpelite_x2_1012_g1_tablet_with_travel_keyboard_firmware*cpe:2.3:o:hp:elite_x2_1012_g1_tablet_with_travel_keyboard_firmware:*:*:*:*:*:*:*:*
hpelite_x2_1012_g2_firmware*cpe:2.3:o:hp:elite_x2_1012_g2_firmware:*:*:*:*:*:*:*:*
hpelitebook_1030_g1_firmware*cpe:2.3:o:hp:elitebook_1030_g1_firmware:*:*:*:*:*:*:*:*
hpelitebook_1040_g3_firmware*cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*
hpelitebook_1040_g4_firmware*cpe:2.3:o:hp:elitebook_1040_g4_firmware:*:*:*:*:*:*:*:*
hpelitebook_820_g3_firmware*cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*
hpelitebook_820_g4_firmware*cpe:2.3:o:hp:elitebook_820_g4_firmware:*:*:*:*:*:*:*:*
hpelitebook_828_g3_firmware*cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	elite_x2_1012_g1_firmware	*	cpe:2.3:o:hp:elite_x2_1012_g1_firmware::::::::
hp	elite_x2_1012_g1_tablet_firmware	*	cpe:2.3:o:hp:elite_x2_1012_g1_tablet_firmware::::::::
hp	elite_x2_1012_g1_tablet_with_travel_keyboard_firmware	*	cpe:2.3:o:hp:elite_x2_1012_g1_tablet_with_travel_keyboard_firmware::::::::
hp	elite_x2_1012_g2_firmware	*	cpe:2.3:o:hp:elite_x2_1012_g2_firmware::::::::
hp	elitebook_1030_g1_firmware	*	cpe:2.3:o:hp:elitebook_1030_g1_firmware::::::::
hp	elitebook_1040_g3_firmware	*	cpe:2.3:o:hp:elitebook_1040_g3_firmware::::::::
hp	elitebook_1040_g4_firmware	*	cpe:2.3:o:hp:elitebook_1040_g4_firmware::::::::
hp	elitebook_820_g3_firmware	*	cpe:2.3:o:hp:elitebook_820_g3_firmware::::::::
hp	elitebook_820_g4_firmware	*	cpe:2.3:o:hp:elitebook_820_g4_firmware::::::::
hp	elitebook_828_g3_firmware	*	cpe:2.3:o:hp:elitebook_828_g3_firmware::::::::

Rows per page:

1-10 of 871

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.5%

JSON

Related for HPSBHF03820