ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-27539

—
CVSS 3.1
7.8 high
EPSS
<1%p4
Published
()
Modified
Description

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.

Vendors
hp
Products
zcentral 4r workstation firmware, z1 all-in-one g3 workstation firmware, elitebook 725 g4 firmware, elitebook 745 g4 firmware, elitebook 755 g4 firmware, probook 645 g3 firmware, probook 655 g3 firmware, mt43 mobile thin client firmware, elite x2 1012 g2 firmware, elitebook 1040 g4 firmware, elitebook 820 g4 firmware, elitebook 828 g4 firmware
Weakness
CWE-367
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.