7

CVE-2022-27538

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

Data is provided by the National Vulnerability Database (NVD)
HpDragonfly Folio G3 2-in-1 Firmware Version < 01.03.01
   HpDragonfly Folio G3 2-in-1 Version-
HpElite Dragonfly Firmware Version < 01.22.00
   HpElite Dragonfly Version-
HpElite Dragonfly G3 Firmware Version < 01.04.00
   HpElite Dragonfly G3 Version-
HpElite Dragonfly G2 Firmware Version < 01.11.00
   HpElite Dragonfly G2 Version-
HpElite Dragonfly Max Firmware Version < 01.11.00
   HpElite Dragonfly Max Version-
HpElite X2 1013 G3 Firmware Version < 01.22.00
   HpElite X2 1013 G3 Version-
HpElite X2 G4 Firmware Version < 01.22.00
   HpElite X2 G4 Version-
HpElite X2 G8 Tablet Firmware Version < 01.11.00
   HpElite X2 G8 Tablet Version-
HpElite X360 1040 G9 2-in-1 Firmware Version < 01.04.02
   HpElite X360 1040 G9 2-in-1 Version-
HpElitebook 1040 G9 Firmware Version < 01.04.02
   HpElitebook 1040 G9 Version-
HpElitebook 1050 G1 Firmware Version < 01.22.00
   HpElitebook 1050 G1 Version-
HpElitebook 630 G9 Firmware Version < 01.05.00
   HpElitebook 630 G9 Version-
HpElitebook 640 G9 Firmware Version < 01.05.00
   HpElitebook 640 G9 Version-
HpElitebook 645 G9 Firmware Version < 01.09.00
   HpElitebook 645 G9 Version-
HpElitebook 650 G9 Firmware Version < 01.05.00
   HpElitebook 650 G9 Version-
HpElitebook 655 G9 Firmware Version < 01.09.00
   HpElitebook 655 G9 Version-
HpElitebook 735 G5 Firmware Version < 01.22.00
   HpElitebook 735 G5 Version-
HpElitebook 735 G6 Firmware Version < 01.22.00
   HpElitebook 735 G6 Version-
HpElitebook 745 G5 Firmware Version < 01.22.00
   HpElitebook 745 G5 Version-
HpElitebook 745 G6 Firmware Version < 01.22.00
   HpElitebook 745 G6 Version-
HpElitebook 755 G5 Firmware Version < 01.22.00
   HpElitebook 755 G5 Version-
HpElitebook 830 G9 Firmware Version < 01.04.02
   HpElitebook 830 G9 Version-
HpElitebook 830 G5 Firmware Version < 01.22.00
   HpElitebook 830 G5 Version-
HpElitebook 830 G6 Firmware Version < 01.22.00
   HpElitebook 830 G6 Version-
HpElitebook 830 G7 Firmware Version < 01.11.00
   HpElitebook 830 G7 Version-
HpElitebook 830 G8 Firmware Version < 01.11.00
   HpElitebook 830 G8 Version-
HpElitebook 835 G9 Firmware Version < 01.03.01
   HpElitebook 835 G9 Version-
HpElitebook 835 G7 Firmware Version < 01.11.00
   HpElitebook 835 G7 Version-
HpElitebook 835 G8 Firmware Version < 01.11.00
   HpElitebook 835 G8 Version-
HpElitebook 836 G5 Firmware Version < 01.22.00
   HpElitebook 836 G5 Version-
HpElitebook 836 G6 Firmware Version < 01.22.00
   HpElitebook 836 G6 Version-
HpElitebook 840 G9 Firmware Version < 01.04.02
   HpElitebook 840 G9 Version-
HpElitebook 840 Aero G8 Firmware Version < 01.11.00
   HpElitebook 840 Aero G8 Version-
HpElitebook 840 G5 Firmware Version < 01.22.00
   HpElitebook 840 G5 Version-
HpElitebook 840 G6 Firmware Version < 01.22.00
   HpElitebook 840 G6 Version-
HpElitebook 840 G7 Firmware Version < 01.11.00
   HpElitebook 840 G7 Version-
HpElitebook 840 G8 Firmware Version < 01.11.00
   HpElitebook 840 G8 Version-
HpElitebook 840r G4 Firmware Version < 01.22.00
   HpElitebook 840r G4 Version-
HpElitebook 845 G9 Firmware Version < 01.03.01
   HpElitebook 845 G9 Version-
HpElitebook 845 G7 Firmware Version < 01.11.00
   HpElitebook 845 G7 Version-
HpElitebook 845 G8 Firmware Version < 01.11.00
   HpElitebook 845 G8 Version-
HpElitebook 846 G5 Firmware Version < 01.22.00
   HpElitebook 846 G5 Version-
HpElitebook 850 G5 Firmware Version < 01.22.00
   HpElitebook 850 G5 Version-
HpElitebook 850 G6 Firmware Version < 01.22.00
   HpElitebook 850 G6 Version-
HpElitebook 850 G7 Firmware Version < 01.11.00
   HpElitebook 850 G7 Version-
HpElitebook 850 G8 Firmware Version < 01.11.00
   HpElitebook 850 G8 Version-
HpElitebook 855 G7 Firmware Version < 01.11.00
   HpElitebook 855 G7 Version-
HpElitebook 855 G8 Firmware Version < 01.11.00
   HpElitebook 855 G8 Version-
HpElitebook 860 G9 Firmware Version < 01.04.02
   HpElitebook 860 G9 Version-
HpElitebook 865 G9 Firmware Version < 01.03.01
   HpElitebook 865 G9 Version-
HpElitebook X360 1030 G3 Firmware Version < 01.22.00
   HpElitebook X360 1030 G3 Version-
HpElitebook X360 1030 G4 Firmware Version < 01.22.00
   HpElitebook X360 1030 G4 Version-
HpElitebook X360 1030 G7 Firmware Version < 01.11.00
   HpElitebook X360 1030 G7 Version-
HpElitebook X360 1030 G8 Firmware Version < 01.11.00
   HpElitebook X360 1030 G8 Version-
HpElitebook X360 1040 G5 Firmware Version < 01.22.00
   HpElitebook X360 1040 G5 Version-
HpElitebook X360 1040 G6 Firmware Version < 01.22.00
   HpElitebook X360 1040 G6 Version-
HpElitebook X360 1040 G7 Firmware Version < 01.11.00
   HpElitebook X360 1040 G7 Version-
HpElitebook X360 1040 G8 Firmware Version < 01.11.00
   HpElitebook X360 1040 G8 Version-
HpElitebook X360 830 G5 Firmware Version < 01.22.00
   HpElitebook X360 830 G5 Version-
HpElitebook X360 830 G6 Firmware Version < 01.22.00
   HpElitebook X360 830 G6 Version-
HpElitebook X360 830 G7 Firmware Version < 01.11.00
   HpElitebook X360 830 G7 Version-
HpElitebook X360 830 G8 Firmware Version < 01.11.00
   HpElitebook X360 830 G8 Version-
HpPro X360 435 G9 Firmware Version < 01.09.00
   HpPro X360 435 G9 Version-
HpPro X360 Fortis G10 Firmware Version < 01.04.00
   HpPro X360 Fortis G10 Version-
HpPro X360 Fortis G9 Firmware Version < 01.04.00
   HpPro X360 Fortis G9 Version-
HpProbook 430 G5 Firmware Version < 01.22.00
   HpProbook 430 G5 Version-
HpProbook 430 G6 Firmware Version < 01.22.00
   HpProbook 430 G6 Version-
HpProbook 430 G7 Firmware Version < 01.15.00
   HpProbook 430 G7 Version-
HpProbook 430 G8 Firmware Version < 01.11.00
   HpProbook 430 G8 Version-
HpProbook 440 G9 Firmware Version < 01.05.00
   HpProbook 440 G9 Version-
HpProbook 440 G5 Firmware Version < 01.22.00
   HpProbook 440 G5 Version-
HpProbook 440 G6 Firmware Version < 01.22.00
   HpProbook 440 G6 Version-
HpProbook 440 G7 Firmware Version < 01.15.00
   HpProbook 440 G7 Version-
HpProbook 440 G8 Firmware Version < 01.11.00
   HpProbook 440 G8 Version-
HpProbook 445 G9 Firmware Version < 01.09.00
   HpProbook 445 G9 Version-
HpProbook 445 G6 Firmware Version < 01.22.00
   HpProbook 445 G6 Version-
HpProbook 445 G7 Firmware Version < 01.11.00
   HpProbook 445 G7 Version-
HpProbook 445 G8 Firmware Version < 01.11.00
   HpProbook 445 G8 Version-
HpProbook 445r G6 Firmware Version < 01.22.00
   HpProbook 445r G6 Version-
HpProbook 450 G9 Firmware Version < 01.05.00
   HpProbook 450 G9 Version-
HpProbook 450 G5 Firmware Version < 01.22.00
   HpProbook 450 G5 Version-
HpProbook 450 G6 Firmware Version < 01.22.00
   HpProbook 450 G6 Version-
HpProbook 450 G7 Firmware Version < 01.15.00
   HpProbook 450 G7 Version-
HpProbook 450 G8 Firmware Version < 01.11.00
   HpProbook 450 G8 Version-
HpProbook 455 G9 Firmware Version < 01.09.00
   HpProbook 455 G9 Version-
HpProbook 455 G5 Firmware Version < 01.22.00
   HpProbook 455 G5 Version-
HpProbook 455 G6 Firmware Version < 01.22.00
   HpProbook 455 G6 Version-
HpProbook 455 G7 Firmware Version < 01.11.00
   HpProbook 455 G7 Version-
HpProbook 455 G8 Firmware Version < 01.11.00
   HpProbook 455 G8 Version-
HpProbook 455r G6 Firmware Version < 01.22.00
   HpProbook 455r G6 Version-
HpProbook 470 G5 Firmware Version < 01.22.00
   HpProbook 470 G5 Version-
HpProbook 630 G8 Firmware Version < 01.11.00
   HpProbook 630 G8 Version-
HpProbook 635 Aero G7 Firmware Version < 01.11.00
   HpProbook 635 Aero G7 Version-
HpProbook 635 Aero G8 Firmware Version < 01.11.00
   HpProbook 635 Aero G8 Version-
HpProbook 640 G4 Firmware Version < 01.22.00
   HpProbook 640 G4 Version-
HpProbook 640 G5 Firmware Version < 01.22.00
   HpProbook 640 G5 Version-
HpProbook 640 G7 Firmware Version < 01.11.00
   HpProbook 640 G7 Version-
HpProbook 640 G8 Firmware Version < 01.11.00
   HpProbook 640 G8 Version-
HpProbook 645 G4 Firmware Version < 01.22.00
   HpProbook 645 G4 Version-
HpProbook 650 G4 Firmware Version < 01.22.00
   HpProbook 650 G4 Version-
HpProbook 650 G5 Firmware Version < 01.22.00
   HpProbook 650 G5 Version-
HpProbook 650 G7 Firmware Version < 01.11.00
   HpProbook 650 G7 Version-
HpProbook 650 G8 Firmware Version < 01.11.00
   HpProbook 650 G8 Version-
HpProbook Fortis G10 Firmware Version < 01.04.00
   HpProbook Fortis G10 Version-
HpProbook Fortis G9 Firmware Version < 01.04.00
   HpProbook Fortis G9 Version-
HpProbook X360 435 G7 Firmware Version < 01.11.00
   HpProbook X360 435 G7 Version-
HpProbook X360 435 G8 Firmware Version < 01.11.00
   HpProbook X360 435 G8 Version-
HpProbook X360 440 G1 Firmware Version < 01.22.00
   HpProbook X360 440 G1 Version-
HpZbook 14u G5 Firmware Version < 01.22.00
   HpZbook 14u G5 Version-
HpZbook 14u G6 Firmware Version < 01.22.00
   HpZbook 14u G6 Version-
HpZbook 15 G5 Firmware Version < 01.22.00
   HpZbook 15 G5 Version-
HpZbook 15 G6 Firmware Version < 01.22.00
   HpZbook 15 G6 Version-
HpZbook 15u G5 Firmware Version < 01.22.00
   HpZbook 15u G5 Version-
HpZbook 15u G6 Firmware Version < 01.22.00
   HpZbook 15u G6 Version-
HpZbook 17 G5 Firmware Version < 01.22.00
   HpZbook 17 G5 Version-
HpZbook 17 G6 Firmware Version < 01.22.00
   HpZbook 17 G6 Version-
HpZbook Create G7 Firmware Version < 01.11.00
   HpZbook Create G7 Version-
HpZbook Firefly 14 G7 Firmware Version < 01.11.00
   HpZbook Firefly 14 G7 Version-
HpZbook Firefly G8 Firmware Version < 01.11.00
   HpZbook Firefly G8 Version-
HpZbook Firefly G9 Firmware Version < 01.04.02
   HpZbook Firefly G9 Version-
HpZbook Firefly 15 G7 Firmware Version < 01.11.00
   HpZbook Firefly 15 G7 Version-
HpZbook Firefly 15 G8 Firmware Version < 01.11.00
   HpZbook Firefly 15 G8 Version-
HpZbook Firefly 16 G9 Firmware Version < 01.04.02
   HpZbook Firefly 16 G9 Version-
HpZbook Fury 15 G7 Firmware Version < 01.11.00
   HpZbook Fury 15 G7 Version-
HpZbook Fury G8 Firmware Version < 01.11.00
   HpZbook Fury G8 Version-
HpZbook Fury 16 G9 Firmware Version < 01.03.02
   HpZbook Fury 16 G9 Version-
HpZbook Fury 17 G7 Firmware Version < 01.11.00
   HpZbook Fury 17 G7 Version-
HpZbook Fury 17 G8 Firmware Version < 01.11.00
   HpZbook Fury 17 G8 Version-
HpZbook Power G8 Firmware Version < 01.11.00
   HpZbook Power G8 Version-
HpZbook Power G9 Firmware Version < 01.04.01
   HpZbook Power G9 Version-
HpZbook Power G7 Firmware Version-
   HpZbook Power G7 Version-
HpZbook Studio G8 Firmware Version < 01.11.00
   HpZbook Studio G8 Version-
HpZbook Studio 16 G9 Firmware Version < 01.04.01
   HpZbook Studio 16 G9 Version-
HpZbook Studio G5 Firmware Version < 01.22.00
   HpZbook Studio G5 Version-
HpZbook Studio G7 Firmware Version < 01.11.00
   HpZbook Studio G7 Version-
HpZbook Studio X360 G5 Firmware Version < 01.22.00
   HpZbook Studio X360 G5 Version-
HpZhan 66 Pro 13 G2 Firmware Version < 01.22.00
   HpZhan 66 Pro 13 G2 Version-
HpZhan 66 Pro 14 G2 Firmware Version < 01.22.00
   HpZhan 66 Pro 14 G2 Version-
HpZhan 66 Pro 14 G3 Firmware Version < 01.15.00
   HpZhan 66 Pro 14 G3 Version-
HpZhan 66 Pro 14 G4 Firmware Version < 01.11.00
   HpZhan 66 Pro 14 G4 Version-
HpZhan 66 Pro G5 Firmware Version < 01.05.00
   HpZhan 66 Pro G5 Version-
HpZhan 66 Pro 15 G2 Firmware Version < 01.22.00
   HpZhan 66 Pro 15 G2 Version-
HpZhan 66 Pro 15 G3 Firmware Version < 01.15.00
   HpZhan 66 Pro 15 G3 Version-
HpZhan 66 Pro A 14 G3 Firmware Version < 01.11.00
   HpZhan 66 Pro A 14 G3 Version-
HpZhan 66 Pro A 14 G4 Firmware Version < 01.11.00
   HpZhan 66 Pro A 14 G4 Version-
HpZhan 66 Pro A 14 G5 Firmware Version < 01.09.00
   HpZhan 66 Pro A 14 G5 Version-
HpZhan 66 Pro G1 Firmware Version < 01.22.00
   HpZhan 66 Pro G1 Version-
HpZhan X 13 G2 Firmware Version < 01.22.00
   HpZhan X 13 G2 Version-
HpElite Mini 600 G9 Firmware Version < 02.06.00
   HpElite Mini 600 G9 Version-
HpElite Mini 800 G9 Firmware Version < 02.06.00
   HpElite Mini 800 G9 Version-
HpElite Sff 600 G9 Firmware Version < 02.06.00
   HpElite Sff 600 G9 Version-
HpElite Sff 800 G9 Firmware Version < 02.06.00
   HpElite Sff 800 G9 Version-
HpElite Slice Firmware Version < 02.59
   HpElite Slice Version-
HpElite Slice G2 Firmware Version < 02.59
   HpElite Slice G2 Version-
HpElite Tower 600 G9 Firmware Version < 02.06.00
   HpElite Tower 600 G9 Version-
HpElite Tower 680 G9 Firmware Version < 02.06.00
   HpElite Tower 680 G9 Version-
HpElite Tower 800 G9 Firmware Version < 02.06.00
   HpElite Tower 800 G9 Version-
HpElite Tower 880 G9 Firmware Version < 02.06.00
   HpElite Tower 880 G9 Version-
HpElitedesk 800 G3 Tower Pc Firmware Version < 02.44
   HpElitedesk 800 G3 Tower Pc Version-
HpElitedesk 800 G4 Tower Pc Firmware Version < 02.21.00
   HpElitedesk 800 G4 Tower Pc Version-
HpElitedesk 800 G5 Tower Pc Firmware Version < 02.15.00
   HpElitedesk 800 G5 Tower Pc Version-
HpElitedesk 800 G6 Tower Pc Firmware Version < 02.13.00
   HpElitedesk 800 G6 Tower Pc Version-
HpElitedesk 800 G8 Tower Pc Firmware Version < 02.10.00
   HpElitedesk 800 G8 Tower Pc Version-
HpElitedesk 880 G3 Tower Pc Firmware Version < 02.44
   HpElitedesk 880 G3 Tower Pc Version-
HpElitedesk 880 G4 Tower Pc Firmware Version < 02.21.00
   HpElitedesk 880 G4 Tower Pc Version-
HpElitedesk 880 G5 Tower Pc Firmware Version < 02.15.00
   HpElitedesk 880 G5 Tower Pc Version-
HpElitedesk 880 G6 Tower Pc Firmware Version < 02.13.00
   HpElitedesk 880 G6 Tower Pc Version-
HpElitedesk 880 G8 Tower Pc Firmware Version < 02.10.00
   HpElitedesk 880 G8 Tower Pc Version-
HpPro Mini 400 G9 Firmware Version < 02.06.00
   HpPro Mini 400 G9 Version-
HpPro Sff 400 G9 Firmware Version < 02.06.00
   HpPro Sff 400 G9 Version-
HpPro Tower 400 G9 Firmware Version < 02.06.00
   HpPro Tower 400 G9 Version-
HpPro Tower 480 G9 Firmware Version < 02.06.00
   HpPro Tower 480 G9 Version-
HpProdesk 400 G5 Microtower Pc Firmware Version < 02.21.00
   HpProdesk 400 G5 Microtower Pc Version-
HpProdesk 400 G7 Microtower Pc Firmware Version < 02.13.00
   HpProdesk 400 G7 Microtower Pc Version-
HpProdesk 405 G6 Desktop Mini Firmware Version < 02.10.00
   HpProdesk 405 G6 Desktop Mini Version-
HpProdesk 480 G5 Microtower Pc Firmware Version < 02.21.00
   HpProdesk 480 G5 Microtower Pc Version-
HpProdesk 480 G6 Microtower Pc Firmware Version < 02.15.00
   HpProdesk 480 G6 Microtower Pc Version-
HpProdesk 600 G4 Microtower Pc Firmware Version < 02.21.00
   HpProdesk 600 G4 Microtower Pc Version-
HpProdesk 600 G5 Microtower Pc Firmware Version < 02.15.00
   HpProdesk 600 G5 Microtower Pc Version-
HpProdesk 600 G6 Microtower Pc Firmware Version < 02.13.00
   HpProdesk 600 G6 Microtower Pc Version-
HpZ1 G8 Tower Firmware Version < 02.10.00
   HpZ1 G8 Tower Version-
HpEngage Go 10 Mobile System Firmware Version < 01.11.00
   HpEngage Go 10 Mobile System Version-
HpEngage Go Mobile System Firmware Version < 01.22.00
   HpEngage Go Mobile System Version-
HpEngage One Pro Aio System Firmware Version < 02.13.00
   HpEngage One Pro Aio System Version-
HpMp9 G4 Retail System Firmware Version < 02.21.00
   HpMp9 G4 Retail System Version-
HpZ1 All-in-one G3 Firmware Version < 01.33
   HpZ1 All-in-one G3 Version-
HpZ2 Mini G3 Firmware Version < 01.85
   HpZ2 Mini G3 Version-
HpZ2 Mini G4 Firmware Version < 01.08.03
   HpZ2 Mini G4 Version-
HpZ2 Mini G5 Firmware Version < 01.04.07
   HpZ2 Mini G5 Version-
HpZ2 Mini G9 Firmware Version < 02.00.00
   HpZ2 Mini G9 Version-
HpZ2 Small Form Factor G4 Firmware Version < 01.08.03
   HpZ2 Small Form Factor G4 Version-
HpZ2 Small Form Factor G5 Firmware Version < 01.04.07
   HpZ2 Small Form Factor G5 Version-
HpZ2 Small Form Factor G8 Firmware Version < 01.06.00
   HpZ2 Small Form Factor G8 Version-
HpZ2 Small Form Factor G9 Firmware Version < 02.00.00
   HpZ2 Small Form Factor G9 Version-
HpZ2 Tower G4 Firmware Version < 01.08.03
   HpZ2 Tower G4 Version-
HpZ2 Tower G5 Firmware Version < 01.04.07
   HpZ2 Tower G5 Version-
HpZ2 Tower G8 Firmware Version < 01.06.00
   HpZ2 Tower G8 Version-
HpZ2 Tower G9 Firmware Version < 02.00.00
   HpZ2 Tower G9 Version-
HpZ238 Microtower Firmware Version < 01.85
   HpZ238 Microtower Version-
HpZ240 Small Form Factor Firmware Version < 01.85
   HpZ240 Small Form Factor Version-
HpZ240 Tower Firmware Version < 01.85
   HpZ240 Tower Version-
HpMt22 Firmware Version < 01.14.00
   HpMt22 Version-
HpMt31 Mobile Thin Client Firmware Version < 01.22.00
   HpMt31 Mobile Thin Client Version-
HpMt32 Firmware Version < 01.11.00
   HpMt32 Version-
HpMt44 Firmware Version < 01.22.00
   HpMt44 Version-
HpMt45 Firmware Version < 01.22.00
   HpMt45 Version-
HpMt46 Firmware Version < 01.11.00
   HpMt46 Version-
HpPro Mt440 G3 Firmware Version < 01.05.00
   HpPro Mt440 G3 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.256
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.