Lucene search
HP Product Security Response TeamHPSBHF03836HistoryMar 21, 2023 - 12:00 a.m.
Insyde UEFI Firmware March 2023 Security Update (TOCTOU)
2023-03-2100:00:00
HP Product Security Response Team
support.hp.com
32
uefi
firmware
security update
toctou
vulnerabilities
arbitrary code execution
denial of service
information disclosure
hp pcs
insydeh20
softpaqs
affected platforms
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Potential Time-of-Check to Time-of-Use (TOCTOU) vulnerabilities have been identified in certain HP PC products using Insyde UEFI firmware (InsydeH20), which may allow arbitrary code execution, denial of service, and information disclosure. Firmware updates have been released to mitigate the potential vulnerabilities.
Insyde has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.
Affected configurations
Node
hphp_11-ab0xx_x360_convertibleRange<F.22
ORhphp_14-cf0xxxRange<F.73
ORhphp_14-cf1xxxRange<F.73
ORhphp_14t-cf100Range<F.73
ORhphp_14-cf2xxxRange<F.21
ORhphp_14t-cf200Range<F.21
ORhphp_14-ck0xxxRange<F.73
ORhphp_14-ck1xxxRange<F.73
ORhphp_14t-ck100Range<F.73
ORhphp_14-ck2xxxRange<F.21
ORhphp_14t-ck200Range<F.21
ORhphp_14-df0xxxRange<F.73
ORhphp_14-dg0xxxRange<F.73
ORhphp_14g-cr0xxxRange<F.73
ORhphp_14g-cr1xxxRange<F.73
ORhphp_14g-cr2xxxRange<F.21
ORhphp_14-ma0xxxRange<F.73
ORhphp_14-ma2xxxRange<F.21
ORhphp_14t-ma200Range<F.21
ORhphp_14q-cs0xxxRange<F.73
ORhphp_14q-cs1xxxRange<F.73
ORhphp_14q-cs2xxxRange<F.21
ORhphp_14s-cf0xxxRange<F.73
ORhphp_14s-cf1xxxRange<F.73
ORhphp_14s-cf2xxxRange<F.21
ORhphp_14s-cr0xxxRange<F.73
ORhphp_14s-cr1xxxRange<F.73
ORhphp_14s-cr2xxxRange<F.21
ORhphp_14s-cs0xxxRange<F.73
ORhphp_14s-cs1xxxRange<F.73
ORhphp_14s-cs2xxxRange<F.21
ORhphp_15-bs0xxRange<F.71
ORhphp_15-bs1xxRange<F.71
ORhp15t-bs100Range<F.71
ORhphp_15-bs2xxRange<F.71
ORhphp_15-bs5xxRange<F.71
ORhphp_15-bs6xxRange<F.71
ORhphp_15-bs7xxRange<F.71
ORhp15t-bs700Range<F.71
ORhphp_15-bw0xxRange<F.54
ORhphp_15-da00xxRange<F.40
ORhphp_15-da0xxxRange<F.43
ORhphp_15-da1xxxRange<F.43
ORhphp_15t-da100Range<F.43
ORhphp_15-da2xxxRange<F.43
ORhphp_15t-da200Range<F.43
ORhphp_15-db1xxxRange<F.40
ORhphp_15z-db100Range<F.40
ORhphp_15-dw0xxxRange<F.58
ORhphp_15t-dw000Range<F.58
ORhphp_15-dw1xxxRange<F.58
ORhphp_15t-dw100Range<F.58
ORhphp_15-dw2xxxRange<F.58
ORhphp_15t-dw200Range<F.58
ORhphp_15-dw3xxxRange<F.58
ORhphp_15t-dw300Range<F.58
ORhphp_15-dw4xxxRange<F.58
ORhp15t-dw400Range<F.58
ORhphp_15g-br0xxRange<F.71
ORhphp_15g-br1xxRange<F.71
ORhphp_15g-bx0xxRange<F.54
ORhphp_15g-da00xxRange<F.40
ORhphp_15g-dr0xxxRange<F.43
ORhphp_15g-dr1xxxRange<F.43
ORhphp_15g-dr2xxxRange<F.43
ORhphp_15g-dx1xxxRange<F.40
ORhphp_15-gw0xxxRange<F.33
ORhphp_15q-bu0xxRange<F.71
ORhphp_15q-bu1xxRange<F.71
ORhphp_15q-by0xxRange<F.54
ORhphp_15q-da00xxRange<F.40
ORhphp_15q-ds0xxxRange<F.43
ORhphp_15q-ds1xxxRange<F.43
ORhphp_15q-ds2xxxRange<F.43
ORhphp_15q-dy1xxxRange<F.40
ORhphp_15-ra0xxRange<F.71
ORhphp_15s-dr0xxxRange<F.58
ORhphp_15s-dr1xxxRange<F.58
ORhphp_15s-dr2xxxRange<F.58
ORhphp_15s-dr3xxxRange<F.58
ORhphp_15s-dr4xxxRange<F.58
ORhphp_15s-dr4xxxRange<F.58
ORhphp_15s-du0xxxRange<F.58
ORhphp_15s-du1xxxRange<F.58
ORhphp_15s-du2xxxRange<F.58
ORhphp_15s-du4xxxRange<F.58
ORhphp_15s-du4xxxRange<F.58
ORhphp_15s-dy0xxxRange<F.58
ORhphp_15s-dy1xxxRange<F.58
ORhphp_15s-dy2xxxRange<F.58
ORhphp_15s-dy3xxxRange<F.58
ORhphp_15s-dy4xxxRange<F.58
ORhphp_15s-dy4xxxRange<F.58
ORhphp_15s-gr0xxxRange<F.33
ORhphp_15s-gu0xxxRange<F.33
ORhphp_15s-gy0xxxRange<F.33
ORhphp_17-by0xxxRange<F.68
ORhphp_17-by1xxxRange<F.68
ORhphp_17t-by100Range<F.68
ORhphp_17-by2xxxRange<F.21
ORhphp_17t-by200Range<F.21
ORhphp_17-cp1xxxRange<F.08
ORhp17z-cp100Range<F.08
ORhphp_17g-cr0xxxRange<F.68
ORhphp_17g-cr1xxxRange<F.68
ORhphp_17g-cr2xxxRange<F.21
ORhphp_17q-cs0xxxRange<F.68
ORhphp_17q-cs1xxxRange<F.68
ORhphp_17q-cs2xxxRange<F.21
ORhphp_envy_13-ah0xxxRange<F.32
ORhphp_envy_13-ah1xxxRange<F.28
ORhpenvy_-_13t-ah100_firmwareRange<F.28
ORhphp_envy_13-aq0xxxRange<F.18
ORhp13t-aq000Range<F.18
ORhphp_envy_13-aq1xxxRange<F.19
ORhpenvy_-_13t-aq100_firmwareRange<F.19
ORhphp_envy_13-ba0xxxRange<F.26
ORhp13t-ba000Range<F.26
ORhphp_envy_13-ba1xxxRange<F.36
ORhp13t-ba100Range<F.36
ORhphp_envy_13m-ba0xxxRange<F.26
ORhphp_envy_13m-ba1xxxRange<F.36
ORhphp_envy_14-eb0xxxRange<F.41
ORhphp_envy_14-eb1xxxRange<F.31
ORhp14t-eb100Range<F.31
ORhphp_envy_16-h0xxxRange<F.08
ORhp16t-h000Range<F.08
ORhphp_envy_17-ae1xxRange<F.36
ORhp17t-ae100Range<F.36
ORhphp_envy_17-ce0xxxRange<F.16
ORhpenvy_-_17t-ce000_firmwareRange<F.16
ORhphp_envy_17-ce1xxxRange<F.13
ORhpenvy_-_17t-ce100_firmwareRange<F.13
ORhphp_envy_17-ce2xxxRange<F.11
ORhp17t-ce200Range<F.11
ORhphp_envy_17-cg0xxxRange<F.26
ORhp17t-cg000Range<F.26
ORhphp_envy_17-cg1xxxRange<F.36
ORhp17t-cg100Range<F.36
ORhphp_envy_17-ch0xxxRange<F.14
ORhp17t-ch000Range<F.14
ORhphp_envy_17-ch1xxxRange<F.11
ORhp17t-ch100Range<F.11
ORhphp_envy_17-ch2xxxRange<F.13
ORhphp_envy_17-cr0xxxRange<F.07
ORhp17t-cr000Range<F.07
ORhphp_envy_17m-ae1xxRange<F.36
ORhphp_envy_17m-ce0xxxRange<F.16
ORhphp_envy_17m-ce1xxxRange<F.13
ORhphp_envy_17m-cg0xxxRange<F.26
ORhphp_envy_17m-cg1xxxRange<F.36
ORhphp_envy_17m-ch0xxxRange<F.14
ORhphp_envy_17m-ch1xxxRange<F.11
ORhpenvy_x360_firmwareRange<F.22
ORhp13z-ay000Range<F.22
ORhpenvy_x360_firmwareRange<F.06
ORhp13z-ay100Range<F.06
ORhphp_envy_x360_13-bd0xxxRange<F.36
ORhphp_envy_x360_13-bd1xxxRange<F.14
ORhp13t-bd100Range<F.14
ORhphp_envy_x360_13-bf0xxxRange<F.06
ORhp13t-bf000Range<F.06
ORhphp_envy_x360_13m-ay0xxxRange<F.22
ORhphp_envy_x360_13m-bd0xxxRange<F.36
ORhphp_envy_x360_13m-bd1xxxRange<F.14
ORhphp_envy_x360_15-cn0xxxRange<F.30
ORhphp_envy_x360_15-cn1xxxRange<F.28
ORhp15t-cn100Range<F.28
ORhphp_envy_x360_15-dr0xxxRange<F.19
ORhpenvy_x360_-_15t-dr000_firmwareRange<F.19
ORhphp_envy_x360_15-dr1xxxRange<F.15
ORhpenvy_x360_-_15t-dr100_firmwareRange<F.15
ORhphp_envy_x360_15-ed0xxxRange<F.26
ORhp15t-ed000Range<F.26
ORhphp_envy_x360_15-ed1xxxRange<F.36
ORhp15t-ed100Range<F.36
ORhphp_envy_x360_15-ee0xxxRange<F.22
ORhp15z-ee000Range<F.22
ORhphp_envy_x360_15-ee1xxxRange<F.09
ORhp15z-ee100Range<F.09
ORhphp_envy_x360_15-es0xxxRange<F.14
ORhp15t-es000Range<F.14
ORhphp_envy_x360_15-es1xxxRange<F.11
ORhp15t-es100Range<F.11
ORhphp_envy_x360_15-es2xxxRange<F.13
ORhphp_envy_x360_15-eu0xxxRange<F.11
ORhp15z-eu0xxxRange<F.11
ORhphp_envy_x360_15-ew0xxxRange<F.10
ORhp15t-ew000Range<F.10
ORhphp_envy_x360_15-ew0xxxRange<F.11
ORhp15t-ew000Range<F.11
ORhphp_envy_x360_15m-cn0xxxRange<F.30
ORhphp_envy_x360_15m-dr0xxxRange<F.19
ORhphp_envy_x360_15m-dr1xxxRange<F.15
ORhphp_envy_x360_15m-ed0xxxRange<F.26
ORhphp_envy_x360_15m-ed1xxxRange<F.36
ORhphp_envy_x360_15m-ee0xxxRange<F.22
ORhphp_envy_x360_15m-es0xxxRange<F.14
ORhphp_envy_x360_15m-es1xxxRange<F.11
ORhphp_envy_x360_15m-eu0xxxRange<F.11
ORhphp_pavilion_13-an0xxxRange<F.16
ORhp13t-an000Range<F.16
ORhphp_pavilion_13-an1xxxRange<F.17
ORhp13t-an100Range<F.17
ORhphp_pavilion_13-bb0xxxRange<F.41
ORhp13t-bb000Range<F.41
ORhphp_pavilion_13-bb1xxxRange<F.21
ORhp13t-bb100Range<F.21
ORhphp_pavilion_14-ce0xxxRange<F.27
ORhphp_pavilion_14-ce1xxxRange<F.27
ORhp14t-ce100Range<F.27
ORhphp_pavilion_14-ce2xxxRange<F.27
ORhp14t-ce200Range<F.27
ORhphp_pavilion_14-ce3xxxRange<F.18
ORhp14t-ce300Range<F.18
ORhphp_pavilion_14-dv0xxxRange<F.41
ORhp14t-dv000Range<F.41
ORhphp_pavilion_14-dv1xxxRange<F.21
ORhp14t-dv100Range<F.21
ORhphp_pavilion_14-n000_firmwareRange<F.07
ORhp14t-eh000Range<F.07
ORhphp_pavilion_15-bc4xxRange<F.16
ORhphp_pavilion_15-cs0xxxRange<F.27
ORhphp_pavilion_15-cs1xxxRange<F.27
ORhp15t-cs100Range<F.27
ORhphp_pavilion_15-cs2xxxRange<F.27
ORhp15t-cs200Range<F.27
ORhphp_pavilion_15-cs3xxxRange<F.18
ORhp15t-cs300Range<F.18
ORhphp_pavilion_15-cu0xxxRange<F.27
ORhphp_pavilion_15-cu1xxxRange<F.27
ORhp15t-cu100Range<F.27
ORhphp_pavilion_15-eg0xxxRange<F.41
ORhp15t-eg000Range<F.41
ORhphp_pavilion_15-eg1xxxRange<F.21
ORhp15t-eg100Range<F.21
ORhppavilion_15_firmwareRange<F.29
ORhppavilion_15_firmwareRange<F.62
ORhp15t-dk000Range<F.62
ORhppavilion_15_firmwareRange<F.43
ORhp15t-dk100Range<F.43
ORhppavilion_15_firmwareRange<F.21
ORhp15t-dk200Range<F.21
ORhppavilion_14m-cd0xxx_x360_firmwareRange<F.62
ORhp17t-cd000Range<F.62
ORhppavilion_14-cd1xxx_x360_firmwareRange<F.43
ORhp17t-cd100Range<F.43
ORhppavilion_14-cd2xxx_x360_firmwareRange<F.21
ORhp17t-cd200Range<F.21
ORhphp_pavilion_x360_11-ap0xxxRange<F.15
ORhp11t-ap000Range<F.15
ORhphp_pavilion_x360_11m-ap0xxxRange<F.15
ORhphp_pavilion_x360_14-ba0xxRange<F.60
ORhp14t-ba000Range<F.60
ORhphp_pavilion_x360_14-ba1xxRange<F.60
ORhp14t-ba100Range<F.60
ORhphp_pavilion_x360_14-cc0xxRange<F.60
ORhp14t-cc000Range<F.60
ORhphp_pavilion_x360_14-cc1xxRange<F.60
ORhp14t-cc100Range<F.60
ORhphp_pavilion_x360_14-cd0xxxRange<F.41
ORhppavilion_14-cd1xxx_x360_firmwareRange<F.24
ORhppavilion_x360_14t-cd100_firmwareRange<F.24
ORhphp_pavilion_x360_14-cd2xxxRange<F.11
ORhp14t-cd200Range<F.11
ORhphp_pavilion_x360_14-dd0xxxRange<F.41
ORhphp_pavilion_x360_14-dh0xxxRange<F.21
ORhppavilion_x360_14t-dh000_firmwareRange<F.21
ORhphp_pavilion_x360_14-dh1xxxRange<F.14
ORhp14t-dh100Range<F.14
ORhphp_pavilion_x360_14-dh2xxxRange<F.10
ORhp14t-dh200Range<F.10
ORhphp_pavilion_x360_14-dw0xxxRange<F.30
ORhp14t-dw000Range<F.30
ORhphp_pavilion_x360_14-dy0xxxRange<F.20
ORhp14t-dy000Range<F.20
ORhphp_pavilion_x360_14-dy1xxxRange<F.20
ORhp14t-dy100Range<F.20
ORhppavilion_14-cd1xxx_x360_firmwareRange<F.09
ORhp14t-dy200Range<F.09
ORhphp_pavilion_x360_14-ek0xxxRange<F.12
ORhp14t-ek000Range<F.12
ORhphp_pavilion_x360_14m-ba0xxRange<F.60
ORhphp_pavilion_x360_14m-ba1xxRange<F.60
ORhphp_pavilion_x360_14m-cd0xxxRange<F.41
ORhphp_pavilion_x360_14m-dd0xxxRange<F.41
ORhphp_pavilion_x360_14m-dh0xxxRange<F.21
ORhphp_pavilion_x360_14m-dh1xxxRange<F.14
ORhphp_pavilion_x360_14m-dw0xxxRange<F.30
ORhphp_pavilion_x360_14m-dy0xxxRange<F.20
ORhphp_pavilion_x360_14m-dy1xxxRange<F.20
ORhphp_pavilion_x360_14q-cd0xxxRange<F.41
ORhphp_pavilion_x360_14q-cd1xxxRange<F.24
ORhphp_pavilion_x360_14q-dh0xxxRange<F.21
ORhphp_pavilion_x360_14q-dh1xxxRange<F.14
ORhphp_pavilion_x360_14q-dw0xxxRange<F.30
ORhphp_pavilion_x360_14q-dy0xxxRange<F.20
ORhphp_pavilion_x360_14q-dy1xxxRange<F.20
ORhphp_pavilion_x360_15-cr0xxxRange<F.30
ORhppavilion_x360_firmwareRange<F.17
ORhppavilion_x360_-_15t-dq000_firmwareRange<F.17
ORhphp_pavilion_x360_15-dq1xxxRange<F.15
ORhppavilion_x360_-_15t-dq100_firmwareRange<F.15
ORhppavilion_x360_firmwareRange<F.09
ORhp15t-dq200Range<F.09
ORhphp_pavilion_x360_15-er0xxxRange<F.20
ORhp15t-er000Range<F.20
ORhppavilion_x360_firmwareRange<F.09
ORhp15t-er100Range<F.09
ORhphp_spectre_13-af0xxRange<F.40
ORhphp_spectre_13-af1xxRange<F.20
ORhp13t-af100Range<F.20
ORhphp_spectre_13-h200_firmwareRange<F.57
ORhp13t-ak000Range<F.57
ORhphp_spectre_13-h200_firmwareRange<F.31
ORhp13t-ak100Range<F.31
ORhphp_spectre_x360_14-ef1xxxRange<F.19
ORhphp_spectre_x360_16-f0xxxRange<F.13
ORhphp_spectre_x360_16-f1xxxRange<F.13
ORhp16t-f100Range<F.13
ORhphp_stream_11-aa0xx_x360_convertibleRange<F.22
ORhphp_stream_11-ak0xxxRange<F.24
ORhphp_stream_11-y0xxRange<F.32
ORhphp_stream_14-ax0xxRange<F.63
ORhphp_stream_14-ax1xxRange<F.24
ORhphp_stream_14-cb0xxRange<F.63
ORhphp_stream_14-cb1xxRange<F.24
ORhphp_stream_x360_11-ag1xxRange<F.27
ORhphp_tablet_11-be0xxxRange<F.11
ORhp11t-be000Range<F.11
ORhphp_tablet_11m-be0xxxRange<F.11
ORhphp_240_g5Range<F.39
ORhphp_240_g6Range<F.53
ORhphp_240_g7Range<F.73
ORhp240_g9_firmwareRange<F.08
ORhphp_245_g5Range<F.38
ORhphp_245_g8Range<F.23
ORhp245_g9_firmwareRange<F.08
ORhphp_246_g5Range<F.39
ORhphp_246_g6Range<F.53
ORhphp_246_g7Range<F.73
ORhphp_250_g6Range<F.71
ORhphp_250_g7Range<F.43
ORhp250_g9_firmwareRange<F.58
ORhphp_255_g6Range<F.54
ORhphp_255_g7Range<F.40
ORhphp_255_g8Range<F.33
ORhphp_255_g8Range<F.33
ORhp255_g9_firmwareRange<F.10
ORhphp_256_g6Range<F.71
ORhphp_256_g7Range<F.43
ORhphp_258_g6Range<F.71
ORhphp_258_g7Range<F.43
ORhphp_340_g5Range<F.27
ORhphp_340_g7Range<F.37
ORhphp_348_g5Range<F.27
ORhphp_348_g7Range<F.37
ORhphp_470_g7Range<F.68
ORhphp_pavilion_x360_14_g1Range<F.60
ORhphp_spectre_pro_13_g1Range<F.51
ORhphp_stream_11_pro_g4_eeRange<F.28
ORhphp_stream_11_pro_g5Range<F.16
ORhphp_zbook_15v_g5_mobile_workstationRange<F.35
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | hp_11-ab0xx_x360_convertible | * | cpe:2.3:a:hp:hp_11-ab0xx_x360_convertible:*:*:*:*:*:*:*:* |
| hp | hp_14-cf0xxx | * | cpe:2.3:a:hp:hp_14-cf0xxx:*:*:*:*:*:*:*:* |
| hp | hp_14-cf1xxx | * | cpe:2.3:a:hp:hp_14-cf1xxx:*:*:*:*:*:*:*:* |
| hp | hp_14t-cf100 | * | cpe:2.3:a:hp:hp_14t-cf100:*:*:*:*:*:*:*:* |
| hp | hp_14-cf2xxx | * | cpe:2.3:a:hp:hp_14-cf2xxx:*:*:*:*:*:*:*:* |
| hp | hp_14t-cf200 | * | cpe:2.3:a:hp:hp_14t-cf200:*:*:*:*:*:*:*:* |
| hp | hp_14-ck0xxx | * | cpe:2.3:a:hp:hp_14-ck0xxx:*:*:*:*:*:*:*:* |
| hp | hp_14-ck1xxx | * | cpe:2.3:a:hp:hp_14-ck1xxx:*:*:*:*:*:*:*:* |
| hp | hp_14t-ck100 | * | cpe:2.3:a:hp:hp_14t-ck100:*:*:*:*:*:*:*:* |
| hp | hp_14-ck2xxx | * | cpe:2.3:a:hp:hp_14-ck2xxx:*:*:*:*:*:*:*:* |
Related
ics
ics
Siemens RUGGEDCOM APE1808
2023-02-16 12:00:00
cvelist
cvelist
nvd
nvd
prion
prion
Design/Logic Flaw
2022-11-15 00:15:00
Design/Logic Flaw
2022-11-15 00:15:00
Design/Logic Flaw
2022-11-15 00:15:00
cve
cve
cnvd
cnvd
nessus
nessus
Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-34325)
2023-09-26 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Related for HPSBHF03836