ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-2751

—
CVSS 3.0
4.6 medium
EPSS
1%p63
Published
()
Modified
Description

A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.

Vendors
hp
Products
hp 240 g1 firmware, hp 245 g1 firmware, hp 1000-1300 firmware, hp 250 g1 notebook pc firmware, hp 255 g1 notebook pc firmware, hp envy 15-j000 firmware, hp envy 15-j100 firmware, hp pavilion 15-n000 firmware, hp 246 firmware, hp 455 firmware, hp envy 17 j100 firmware, hp envy 17-j100 leap motion se firmware
Weakness
CWE-522
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

No ingested article mentions this CVE yet.