Code injection

2023-10-1819:15:00

PRIOn knowledge base

www.prio-n.com

code injection

security vulnerability

bios

firmware updates

escalation of privilege

nvd

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the potential vulnerability.

CPENameOperatorVersion
200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmwareeq< f.50
200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f2\\)_firmwareeq< f.50
200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f3\\)_firmwareeq< f.50
200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmwareeq< f.50
200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f2\\)_firmwareeq< f.50
200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f3\\)_firmwareeq< f.50
205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmwareeq< f.50
205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f2\\)_firmwareeq< f.50
205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f3\\)_firmwareeq< f.50
205_g8_24_all-in-one_pc_\\(rom_family_ssid_8923\\)_firmwareeq< f.20

Name	Operator	Version
200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmware	eq	< f.50
200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f2\\)_firmware	eq	< f.50
200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f3\\)_firmware	eq	< f.50
200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmware	eq	< f.50
200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f2\\)_firmware	eq	< f.50
200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f3\\)_firmware	eq	< f.50
205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmware	eq	< f.50
205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f2\\)_firmware	eq	< f.50
205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f3\\)_firmware	eq	< f.50
205_g8_24_all-in-one_pc_\\(rom_family_ssid_8923\\)_firmware	eq	< f.20