CVE-2022-23955

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-02 · updated 2026-10-08

Description

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

Affected products

HP Probook 440 G8 Firmware: before 01.08.11 — fixed in 01.08.11
HP Prodesk 405 G6 Small Form Factor Firmware: before 02.07.10 — fixed in 02.07.10

How to fix

Upgrade to a fixed version: HP Probook 440 G8 Firmware 01.08.11; HP Prodesk 405 G6 Small Form Factor Firmware 02.07.10. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_5818692-5818718-16
https://support.hp.com/us-en/document/ish_5818692-5818718-16

Get alerted when CVE-2022-23955 or the next vulnerability affects your stack