High-Severity Firmware Security Flaws Left Unpatched in HP Enterprise Devices

A number of firmware security flaws uncovered in HP's business-oriented high-end notebooks continue to be left unpatched in some devices even months after public disclosure. Binarly, which first revealed details of the issues at the Black Hat USA conference in mid-August 2022, said the...

CVE-2022-23930

creationtimestamp| type| source ---|---|--- 2022-03-11 20:14:54+00:00| seen| https://t.me/cibsecurity/38798 2022-09-12 16:45:07+00:00| seen| https://t.me/truesecator/3403...

CVE-2022-23930

According to connected documentation, CVE-2022-23930 concerns HP BIOS/firmware on enterprise HP PC devices, involving a memory corruption issue in System Management Mode (SMM). The vulnerability is described as a stack-based buffer overflow in SMM that can enable arbitrary code execution with the...