CVE-2022-23930

—

CVSS 3.1

8.2 high

EPSS

<1%p39

Published

Mar 11, 2022 (Mar 11, 2022)

Modified

Jun 17, 2026

Description

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.

Vendors: hp
Products: pc bios
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news3 stories

High-Severity Firmware Security Flaws Left Unpatched in HP Enterprise Devices

The Hacker NewsSep 12, 13:20 UTC · Sep 12, 2022Vulnerability CVE-2022-23930 CVE-2022-31640 CVE-2022-31641+4 CVEs

Some firmware bugs in HP business devices are yet to be fixed

Security AffairsSep 12, 07:27 UTC · Sep 12, 2022Vulnerability CVE-2022-23930 CVE-2022-31644 CVE-2022-31645+3 CVEs

HP addressed 16 High-Severity UEFI firmware flaws impacting laptops, desktops, PoS systems

Security AffairsMar 9, 11:40 UTC · Mar 9, 2022Vulnerability CVE-2021-39297 CVE-2021-39298 CVE-2021-39299+13 CVEs