Lucene search

K
hpHP Product Security Response TeamHPSBHF03948
HistoryJun 25, 2024 - 12:00 a.m.

HP PC BIOS Additional Security Update for TOCTOU

2024-06-2500:00:00
HP Product Security Response Team
support.hp.com
2
hp
pc
bios
toctou
vulnerability
update
security
hp products
arbitrary code execution
denial of service
information disclosure
affected platforms
softpaqs

7.6 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerability. See the affected platforms listed below.

Affected configurations

Vulners
Node
hphp_envy_x360_14_inch_2-in-1_laptop_pc_14-es1xxxRange<01.07.00
OR
hphp_elite_dragonflyRange<01.26.00
OR
hphp_elite_dragonflyRange<01.07.00
OR
hphp_elite_dragonfly_g2Range<01.11.00
OR
hphp_elite_dragonfly_maxRange<01.11.00
OR
hphp_elite_x2_1012_g1Range<01.60
OR
hphp_elite_x2_1012_g1_tabletRange<01.60
OR
hphp_elite_x2_1012_g1_tablet_with_travel_keyboardRange<01.60
OR
hphp_elite_x2_1012_g2Range<1.48
OR
hphp_elite_x2_g4Range<01.28.00
OR
hphp_elite_x2_g4Range<01.26.0
OR
hphp_elite_x2_g8_tabletRange<01.11.00
OR
hphp_envy_x360_14_inch_2-in-1_laptop_pc_14-es1xxxRange<01.07.00
OR
hphp_elitebook_1030_g1Range<01.60
OR
hphp_14_inch_laptop_pc_14-ep1xxxRange<01.07.00
OR
hphp_elitebook_1040_g4Range<01.60
OR
hphp_elitebook_1050_g1Range<01.28.00
OR
hphp_probook_630_g8Range<01.07.00
OR
hphp_14_inch_laptop_pc_14-ep1xxxRange<01.07.00
OR
hphp_15.6_inch_laptop_pc_15-fd1xxxRange<01.07.00
OR
hphp_elitebook_725_g4Range<1.45
OR
hphp_elitebook_735_g6Range<01.26.00
OR
hphp_elitebook_745_g4Range<1.45
OR
hphp_elitebook_745_g6Range<01.26.00
OR
hphp_elitebook_755_g4Range<1.45
OR
hphp_elitebook_820_g4Range<01.60
OR
hphp_elitebook_820_g4Range<1.48
OR
hphp_elitebook_828_g4Range<01.60
OR
hphp_elitebook_828_g4Range<1.48
OR
hphp_elitebook_830_g5Range<01.07.00
OR
hphp_elitebook_830_g5Range<01.28.00
OR
hphp_elitebook_830_g6Range<01.26.00
OR
hphp_elitebook_830_g7Range<01.14.00
OR
hphp_elitebook_830_g8Range<01.15.02
OR
hphp_elitebook_835_g7Range<01.05.01
OR
hphp_elitebook_835_g7Range<01.14.00
OR
hphp_elitebook_836_g5Range<01.28.00
OR
hphp_elitebook_836_g6Range<01.26.00
OR
hphp_14_inch_laptop_pc_14-ep1xxxRange<01.07.00
OR
hphp_elitebook_840_aero_g8Range<01.15.02
OR
hphp_elitebook_840_g4Range<01.60
OR
hphp_elitebook_840_g4Range<1.48
OR
hphp_elitebook_840_g5Range<01.28.00
OR
hphp_elitebook_840_g5Range<01.28.00
OR
hphp_elitebook_840_g6Range<01.26.00
OR
hphp_elitebook_840_g6Range<01.26.00
OR
hphp_elitebook_840_g7Range<01.14.00
OR
hphp_elitebook_840_g8Range<01.15.02
OR
hphp_elitebook_840r_g4Range<01.28.00
OR
hphp_elitebook_845_g7Range<01.05.01
OR
hphp_elitebook_845_g7Range<01.14.00
OR
hphp_elitebook_846_g5Range<01.28.00
OR
hphp_elitebook_848_g4Range<01.60
OR
hphp_elitebook_848_g4Range<1.48
OR
hphp_elitebook_850_g4Range<01.60
OR
hphp_elitebook_850_g4Range<1.48
OR
hphp_elitebook_850_g5Range<01.28.00
OR
hphp_elitebook_850_g6Range<01.26.00
OR
hphp_elitebook_850_g7Range<01.14.00
OR
hphp_elitebook_850_g8Range<01.15.02
OR
hphp_elitebook_855_g7Range<01.14.00
OR
hphp_pavilion_plus_16_inch_laptop_pc_16-ab1xxxRange<01.07.00
OR
hphp_pavilion_plus_16_inch_laptop_pc_16-ab1xxxRange<01.05.01
OR
hphp_elitebook_folio_g1Range<01.60
OR
hphp_elitebook_x360_1020_g2Range<1.48
OR
hphp_elitebook_x360_1030_g2Range<1.48
OR
hphp_elitebook_x360_1030_g2Range<SP152580
OR
hphp_elitebook_x360_1030_g4Range<01.26.00
OR
hphp_elitebook_x360_1030_g7Range<01.14.00
OR
hphp_elitebook_x360_1030_g8Range<01.11.00
OR
hphp_elitebook_x360_1040_g5Range<01.28.00
OR
hphp_elitebook_x360_1040_g6Range<01.26.00
OR
hphp_elitebook_x360_1040_g7Range<01.14.00
OR
hphp_elitebook_x360_1040_g8Range<01.11.00
OR
hphp_elitebook_x360_830_g5Range<01.28.00
OR
hphp_elitebook_x360_830_g6Range<01.26.00
OR
hphp_elitebook_x360_830_g7Range<01.14.00
OR
hphp_elitebook_x360_830_g8Range<01.11.00
OR
hphp_pro_x2_612_g2Range<1.48
OR
hphp_probook_x360_435_g7Range<01.11.01
OR
hphp_pro_x360_fortis_11_inch_g10Range<01.06.00
OR
hphp_pro_x360_fortis_11_inch_g10Range<01.06.00
OR
hphp_probook_11_ee_g2Range<01.60
OR
hphp_probook_430_g4Range<01.60
OR
hphp_probook_430_g4Range<1.48
OR
hphp_probook_430_g5Range<01.28.00
OR
hphp_probook_430_g6Range<01.28.00
OR
hphp_probook_430_g7Range<01.18.00
OR
hphp_probook_430_g8Range<01.11.00
OR
hphp_probook_fortis_14_inch_g10Range<01.07.00
OR
hphp_probook_440_g4Range<01.60
OR
hphp_probook_440_g4Range<1.48
OR
hphp_probook_440_g5Range<01.28.00
OR
hphp_probook_440_g6Range<01.28.00
OR
hphp_probook_440_g7Range<01.18.00
OR
hphp_probook_440_g8Range<01.11.00
OR
hphp_probook_445_g6Range<01.11.00
OR
hphp_probook_445_g7Range<01.14.00
OR
hphp_probook_445_g8Range<01.11.00
OR
hphp_probook_445r_g6Range<01.28.00
OR
hphp_probook_445_g6Range<01.60
OR
hphp_15.6_inch_laptop_pc_15-fd1xxxRange<01.07.00
OR
hphp_probook_450_g4Range<01.60
OR
hphp_probook_450_g6Range<01.28.00
OR
hphp_probook_450_g7Range<01.18.00
OR
hphp_probook_450_g8Range<01.11.00
OR
hphp_probook_455_g4Range<01.11.00
OR
hphp_probook_455_g7Range<01.14.00
OR
hphp_probook_455_g8Range<01.11.00
OR
hphp_probook_455r_g6Range<01.28.00
OR
hphp_probook_470_g5Range<01.28.00
OR
hphp_probook_630_g8Range<01.11.00
OR
hphp_probook_635_aero_g7Range<01.14.00
OR
hphp_probook_635_aero_g8Range<01.11.00
OR
hphp_probook_640_g2Range<01.60
OR
hphp_probook_640_g2Range<1.48
OR
hphp_probook_640_g4Range<01.28.00
OR
hphp_probook_640_g5Range<01.26.00
OR
hphp_probook_640_g7Range<01.14.00
OR
hphp_probook_640_g8Range<01.11.00
OR
hphp_probook_645_g2Range<1.45
OR
hphp_probook_650_g2Range<01.60
OR
hphp_probook_650_g4Range<1.48
OR
hphp_probook_650_g4Range<01.28.00
OR
hphp_probook_650_g5Range<01.26.00
OR
hphp_probook_650_g7Range<01.14.00
OR
hphp_probook_650_g8Range<01.11.00
OR
hphp_probook_655_g2Range<1.45
OR
hphp_probook_fortis_14_inch_g10Range<01.06.00
OR
hphp_probook_fortis_14_inch_g10Range<01.06.00
OR
hphp_probook_x360_11_g2_eeRange<01.50
OR
hphp_probook_x360_11_g1_eeRange<01.27.00
OR
hphp_probook_x360_11_g4_eeRange<01.23.00
OR
hphp_probook_x360_11_g5_eeRange<01.18.00
OR
hphp_probook_x360_11_g6_eeRange<01.19.00
OR
hphp_probook_x360_11_g7_eeRange<01.11.00
OR
hphp_probook_x360_435_g7Range<01.14.00
OR
hphp_probook_x360_435_g8Range<01.11.00
OR
hphp_probook_x360_440_g1Range<01.28.00
OR
hphp_zbook_14u_g4Range<1.48
OR
hphp_zbook_14u_g5Range<01.28.00
OR
hphp_zbook_14u_g6Range<01.26.00
OR
hphp_zbook_15_g4Range<01.60
OR
hphp_zbook_15_g4Range<1.48
OR
hphp_zbook_15_g5Range<01.28.00
OR
hphp_zbook_15_g6Range<01.26.00
OR
hphp_zbook_15u_g4Range<01.60
OR
hphp_zbook_15u_g4Range<1.48
OR
hphp_zbook_15u_g5Range<01.28.00
OR
hphp_zbook_15u_g6Range<01.26.00
OR
hphp_zbook_17_g4Range<01.60
OR
hphp_zbook_17_g4Range<1.48
OR
hphp_zbook_17_g5Range<01.28.00
OR
hphp_zbook_17_g6Range<01.26.00
OR
hphp_zbook_create_g7Range<01.14.00
OR
hphp_zbook_firefly_14_g7Range<01.14.00
OR
hphp_zbook_firefly_14_inch_g8_mobile_workstation_pcRange<01.15.02
OR
hphp_zbook_firefly_14_inch_g8_mobile_workstation_pcRange<01.07.00
OR
hphp_zbook_firefly_15_g7Range<01.14.00
OR
hphp_zbook_firefly_15.6_inch_g8_mobile_workstation_pcRange<01.15.02
OR
hphp_zbook_firefly_16_inch_g10_mobile_workstation_pcRange<01.07.00
OR
hphp_zbook_fury_15_g7Range<01.14.00
OR
hphp_zbook_fury_15.6_inch_g8_mobile_workstation_pcRange<01.11.00
OR
hphp_zbook_fury_16_g10_mobile_workstation_pcRange<01.07.01
OR
hphp_zbook_fury_17_g7Range<01.14.00
OR
hphp_zbook_fury_17.3_inch_g8_mobile_workstation_pcRange<01.11.00
OR
hphp_zbook_firefly_15.6_inch_g8_mobile_workstation_pcRange<01.11.00
OR
hphp_zbook_firefly_15.6_inch_g8_mobile_workstation_pcRange<01.07.01
OR
hphp_zbook_create_g7Range<01.14.00
OR
hphp_zbook_studio_15.6_inch_g8_mobile_workstation_pcRange<01.11.00
OR
hphp_zbook_studio_16_inch_g10_mobile_workstation_pcRange<01.07.00
OR
hphp_zbook_studio_g4Range<01.60
OR
hphp_zbook_studio_g4Range<1.48
OR
hphp_zbook_studio_g5Range<01.28.00
OR
hphp_zbook_studio_g7Range<01.14.00
OR
hphp_zbook_studio_x360_g5Range<01.28.00
OR
hphp_zbook_x2_g4Range<1.48
OR
hphp_zhan_66_pro_13_g2Range<01.28.00
OR
hphp_zhan_66_pro_14_g2Range<01.28.00
OR
hphp_zhan_66_pro_14_g2Range<01.18.00
OR
hphp_zhan_66_pro_14_g4Range<01.11.00
OR
hphp_zhan_66_pro_14_inch_g5Range<01.07.00
OR
hphp_zhan_66_pro_15_g2Range<01.28.00
OR
hphp_zhan_66_pro_15_g2Range<01.18.00
OR
hphp_zhan_66_pro_14_g2Range<01.14.00
OR
hphp_zhan_66_pro_14_g4Range<01.11.00
OR
hphp_zhan_66_pro_14_inch_g5Range<01.11.00
OR
hphp_zhan_66_pro_g1Range<01.28.00
OR
hphp_zhan_x_13_g2Range<01.26.00
OR
hpelite_mini_600_g9_desktop_pcRange<02.10.04
OR
hpelite_mini_800_g9_desktop_pcRange<02.10.04
OR
hphp_prodesk_600_g2_desktop_mini_pcRange<02.10.05
OR
hphp_elitedesk_800_g5_desktop_mini_pcRange<02.10.05
OR
hphp_elite_slice_g2_with_intel_uniteRange<02.64
OR
hphp_elite_slice_g2_with_intel_uniteRange<02.64
OR
hphp_elite_slice_g2_with_intel_uniteRange<02.64
OR
hphp_elite_slice_g2_with_intel_uniteRange<02.64
OR
hphp_elite_slice_g2_with_intel_uniteRange<02.64
OR
hphp_z1_g8_tower_desktop_pcRange<02.10.05
OR
hphp_z1_g8_tower_desktop_pcRange<02.10.05
OR
hphp_elitedesk_800_g4_tower_pcRange<02.10.05
OR
hphp_elitedesk_880_g4_tower_pcRange<02.10.05
OR
hphp_elitedesk_705_g5_desktop_mini_pcRange<02.19.00
OR
hphp_elitedesk_705_g5_small_form_factor_pcRange<02.19.00
OR
hphp_elitedesk_800_g4_small_form_factor_pcRange<2.48
OR
hphp_elitedesk_800_g4_tower_pcRange<2.48
OR
hphp_elitedesk_800_g5_desktop_mini_pcRange<02.19.00
OR
hphp_elitedesk_800_g5_small_form_factor_pcRange<02.19.00
OR
hphp_elitedesk_800_g5_tower_pcRange<02.19.00
OR
hphp_elitedesk_800_g6_small_form_factor_pcRange<02.16.00
OR
hphp_elitedesk_800_g6_tower_pcRange<02.16.00
OR
hphp_elitedesk_800_g8_desktop_mini_pcRange<02.10.00
OR
hphp_elitedesk_800_g8_small_form_factor_pcRange<02.10.00
OR
hphp_elitedesk_800_g8_tower_pcRange<02.10.00
OR
hphp_elitedesk_805_g6_desktop_mini_pcRange<02.13.00
OR
hphp_elitedesk_805_g6_small_form_factor_pcRange<02.13.00
OR
hphp_elitedesk_805_g8_desktop_mini_pcRange<02.06.00
OR
hphp_elitedesk_805_g8_small_form_factor_pcRange<02.06.00
OR
hphp_elitedesk_880_g4_tower_pcRange<2.48
OR
hphp_elitedesk_880_g5_tower_pcRange<02.19.00
OR
hphp_elitedesk_880_g6_tower_pcRange<02.16.00
OR
hphp_elitedesk_880_g8_tower_pcRange<02.10.00
OR
hphp_eliteone_800_g5_23.8-inch_all-in-oneRange<02.19.00
OR
hphp_eliteone_800_g5_23.8-inch_all-in-oneRange<02.19.00
OR
hphp_eliteone_800_g8_24_all-in-one_pcRange<02.10.00
OR
hphp_eliteone_800_g8_27_all-in-one_pcRange<02.10.00
OR
hphp_23.8_inch_all-in-one_desktop_pcRange<02.10.04
OR
hphp_all-in-one_desktop_pc_27-cb1000aRange<02.10.04
OR
hphp_27_inch_all-in-one_desktop_pc_27-cr0xxxRange<02.10.04
OR
hpmini_conferencing_pc_with_zoom_roomsRange<02.10.04
OR
hphp_all-in-one_24-dd0xxxRange<02.10.04
OR
hphp_all-in-one_27-dp0xxxRange<02.10.04
OR
hphp_prodesk_400_g2_desktop_mini_pcRange<02.10.04
OR
hphp_desktop_pro_microtower_pcRange<02.10.04
OR
hphp_z1_g8_tower_desktop_pcRange<02.10.04
OR
hphp_z1_g8_tower_desktop_pcRange<02.10.04
OR
hphp_prodesk_400_g2_desktop_mini_pcRange<2.48
OR
hphp_prodesk_400_g4_microtower_pcRange<2.48
OR
hphp_prodesk_400_g5_desktop_mini_pcRange<02.19.00
OR
hphp_prodesk_400_g6_desktop_mini_pcRange<02.16.00
OR
hphp_prodesk_400_g6_microtower_pcRange<02.19.00
OR
hphp_prodesk_400_g6_small_form_factor_pcRange<02.19.00
OR
hphp_prodesk_400_g7_microtower_pcRange<02.16.00
OR
hphp_prodesk_400_g7_small_form_factor_pcRange<02.16.00
OR
hphp_prodesk_405_g6_desktop_mini_pcRange<02.13.00
OR
hphp_prodesk_405_g6_small_form_factor_pcRange<02.13.00
OR
hphp_prodesk_405_g8_desktop_mini_pcRange<02.06.00
OR
hphp_prodesk_405_g8_small_form_factor_pcRange<02.06.00
OR
hphp_prodesk_480_g7_pci_microtower_pcRange<02.16.00
OR
hphp_prodesk_600_g2_desktop_mini_pcRange<2.48
OR
hphp_prodesk_600_g4_small_form_factor_pcRange<2.48
OR
hphp_prodesk_600_g5_desktop_mini_pcRange<02.19.00
OR
hphp_prodesk_600_g5_microtower_pcRange<02.19.00
OR
hphp_prodesk_600_g5_microtower_pc_\(with_pci_slot\)Range<02.19.00
OR
hphp_prodesk_600_g5_small_form_factor_pcRange<02.19.00
OR
hphp_prodesk_600_g6_desktop_mini_pcRange<02.16.00
OR
hphp_prodesk_600_g6_microtower_pcRange<02.16.00
OR
hphp_prodesk_600_g6_pci_microtower_pcRange<02.16.00
OR
hphp_prodesk_600_g6_small_form_factor_pcRange<02.16.00
OR
hphp_prodesk_680_g6_pci_microtower_pcRange<02.16.00
OR
hphp_proone_400_g2_20-inch_non-touch_all-in-one_pcRange<2.48
OR
hphp_proone_400_g2_20-inch_touch_all-in-one_pcRange<2.48
OR
hphp_proone_400_g5_20-inch_all-in-oneRange<02.19.00
OR
hphp_proone_400_g5_23.8-inch_all-in-oneRange<02.19.00
OR
hphp_proone_400_g6_20_all-in-one_pcRange<02.16.00
OR
hphp_proone_400_g6_24_all-in-one_pcRange<02.16.00
OR
hphp_23.8_inch_all-in-one_desktop_pcRange<02.10.04
OR
hphp_proone_440_g5_23.8-in_all-in-oneRange<02.19.00
OR
hphp_proone_440_g6_24_all-in-one_pcRange<02.16.00
OR
hphp_proone_400_g2_20-inch_non-touch_all-in-one_pcRange<2.48
OR
hphp_proone_600_g2_21.5-inch_non-touch_all-in-one_pcRange<2.48
OR
hphp_proone_600_g5_21.5-in_all-in-oneRange<02.19.00
OR
hphp_proone_600_g6_22_all-in-one_pcRange<02.16.00
OR
hphp_z1_entry_tower_g6Range<02.16.00
OR
hphp_z1_g8_tower_desktop_pcRange<02.10.00
OR
hphp_z1_g8_tower_desktop_pcRange<02.10.05
OR
hphp_200_pro_g4_22_all-in-one_pcRange<02.16.00
OR
hphp_205_pro_g8_24_all-in-one_pcRange<02.16.00
OR
hphp_23.8_inch_all-in-one_desktop_pcRange<02.10.04
OR
hphp_engage_flex_pro_retail_systemRange<02.28.00
OR
hphp_engage_flex_pro_retail_systemRange<02.28.00
OR
hphp_engage_go_10_mobile_systemRange<01.11.00
OR
hphp_engage_go_mobile_systemRange<01.28.00
OR
hphp_engage_one_pro_aio_systemRange<02.16.00
OR
hphp_mp9_g2_retail_systemRange<02.61
OR
hphp_rp9_g1_retail_systemRange<02.61
OR
hphp_z2_mini_g4_workstationRange<01.08.09
OR
hphp_z2_mini_g4_workstationRange<01.08.09
OR
hphp_z2_mini_g5_workstationRange<01.04.16
OR
hphp_z2_mini_g5_workstationRange<01.04.16
OR
hphp_z2_mini_g4_workstationRange<2.01.02
OR
hphp_z2_mini_g4_workstationRange<2.01.02
OR
hphp_z2_small_form_factor_g4_workstationRange<01.08.09
OR
hphp_z2_small_form_factor_g4_workstationRange<01.08.09
OR
hphp_z2_small_form_factor_g5_workstationRange<01.04.16
OR
hphp_z2_small_form_factor_g5_workstationRange<01.04.16
OR
hphp_z2_small_form_factor_g8_workstationRange<01.06.00
OR
hphp_z2_small_form_factor_g8_workstationRange<01.06.00
OR
hphp_z2_small_form_factor_g4_workstationRange<2.01.02
OR
hphp_z2_small_form_factor_g4_workstationRange<2.01.02
OR
hphp_z2_tower_g4_workstationRange<01.08.09
OR
hphp_z2_tower_g4_workstationRange<01.08.09
OR
hphp_z2_tower_g5_workstationRange<01.04.16
OR
hphp_z2_tower_g5_workstationRange<01.04.16
OR
hphp_z2_tower_g8_workstationRange<01.06.00
OR
hphp_z2_tower_g8_workstationRange<01.06.00
OR
hphp_z2_tower_g4_workstationRange<2.01.02
OR
hphp_z2_tower_g4_workstationRange<2.01.02
OR
hphp_z238_microtower_workstationRange<01.91
OR
hphp_z238_microtower_workstationRange<01.91
OR
hphp_z240_small_form_factor_workstationRange<01.91
OR
hphp_z240_small_form_factor_workstationRange<01.91
OR
hphp_z240_tower_workstationRange<01.91
OR
hphp_z240_tower_workstationRange<01.91
OR
hphp_z4_g4_workstation_\(core-x\)Range<2.90
OR
hphp_z4_g4_workstation_\(core-x\)Range<2.90
OR
hphp_z4_g4_workstation_\(xeon_w\)Range<2.90
OR
hphp_z4_g4_workstation_\(xeon_w\)Range<2.90
OR
hphp_z6_g4_workstationRange<2.90
OR
hphp_z6_g4_workstationRange<2.90
OR
hphp_z8_g4_workstationRange<2.90
OR
hphp_z8_g4_workstationRange<2.90
OR
hpradia_clientRange<01.46
OR
hpradia_clientRange<01.24.00
OR
hpradia_clientRange<01.17.00
OR
hpradia_clientRange<01.24.00
OR
hpradia_clientRange<01.13.00
OR
hpradia_clientRange<01.44
OR
hpradia_clientRange<01.24.00
OR
hpradia_clientRange<01.24.00
OR
hpradia_clientRange<01.11.00
OR
hpradia_clientRange<01.07.00
OR
hphp_zbook_firefly_15_g7_mobile_workstationRange<01.10.01

7.6 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Related for HPSBHF03948