CVE-2022-27540

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-28 · updated 2026-06-17
Weakness: CWE-367

Description

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

Affected products

HP Dragonfly Folio 13.5 Inch G3 2-In-1 Notebook Pc Firmware: before 01.07.00 — fixed in 01.07.00
HP Elite Dragonfly 13.5 Inch G3 Notebook Pc Firmware: before 01.07.00 — fixed in 01.07.00
HP Elite Dragonfly Firmware: before 01.26.00 — fixed in 01.26.00
HP Elite Dragonfly G2 Firmware: before 01.11.00 — fixed in 01.11.00
HP Elite Dragonfly Max Firmware: before 01.11.00 — fixed in 01.11.00
HP Elite Mini 600 G9 Desktop Pc Firmware: before 02.10.04 — fixed in 02.10.04
HP Elite Mini 800 G9 Desktop Pc Firmware: before 02.10.04 — fixed in 02.10.04
HP Elite Mt645 G7 Mobile Thin Client Firmware: before 01.10.01 — fixed in 01.10.01
HP Elite Sff 600 G9 Desktop Pc Firmware: before 02.10.05 — fixed in 02.10.05
HP Elite Sff 800 G9 Desktop Pc Firmware: before 02.10.05 — fixed in 02.10.05
HP Elite Slice G2 - Audio Ready With Zoom Rooms Firmware: before 2.64 — fixed in 2.64
HP Elite Slice G2 - Partner Ready With Microsoft Teams Rooms Firmware: before 2.64 — fixed in 2.64
HP Elite Slice G2 With Intel Unite Firmware: before 2.64 — fixed in 2.64
HP Elite Slice G2 With Microsoft Teams Rooms Firmware: before 2.64 — fixed in 2.64
HP Elite Slice G2 With Zoom Rooms Firmware: before 2.64 — fixed in 2.64
HP Elite Tower 600 G9 Desktop Pc Firmware: before 02.10.05 — fixed in 02.10.05
HP Elite Tower 680 G9 Desktop Pc Firmware: before 02.10.05 — fixed in 02.10.05
HP Elite Tower 800 G9 Desktop Pc Firmware: before 02.10.05 — fixed in 02.10.05
HP Elite Tower 880 G9 Desktop Pc Firmware: before 02.10.05 — fixed in 02.10.05
HP Elite X2 1012 G1 Firmware: before 1.6 — fixed in 1.6
HP Elite X2 1012 G1 Tablet Firmware: 1.6
HP Elite X2 1012 G1 Tablet With Travel Keyboard Firmware: 1.6
HP Elite X2 1012 G2 Firmware: 1.48
HP Elite X2 1013 G3 Firmware: 01.28.00
HP Elite X2 G4 Firmware: 01.26.0
HP Elite X2 G8 Tablet Firmware: before 01.11.00 — fixed in 01.11.00
HP Elite X360 1040 14 Inch G9 2-In-1 Notebook Pc Firmware: before 01.07.00 — fixed in 01.07.00
HP Elitebook 1030 G1 Firmware: before 1.6 — fixed in 1.6
HP Elitebook 1040 14 Inch G9 Notebook Pc Firmware: before 01.07.00 — fixed in 01.07.00
HP Elitebook 1040 G3 Firmware: before 1.6 — fixed in 1.6

How to fix

Upgrade to a fixed version: HP Dragonfly Folio 13.5 Inch G3 2-In-1 Notebook Pc Firmware 01.07.00; HP Elite Dragonfly 13.5 Inch G3 Notebook Pc Firmware 01.07.00; HP Elite Dragonfly Firmware 01.26.00; HP Elite Dragonfly G2 Firmware 01.11.00; HP Elite Dragonfly Max Firmware 01.11.00; HP Elite Mini 600 G9 Desktop Pc Firmware 02.10.04; HP Elite Mini 800 G9 Desktop Pc Firmware 02.10.04; HP Elite Mt645 G7 Mobile Thin Client Firmware 01.10.01; HP Elite Sff 600 G9 Desktop Pc Firmware 02.10.05; HP Elite Sff 800 G9 Desktop Pc Firmware 02.10.05; HP Elite Slice G2 - Audio Ready With Zoom Rooms Firmware 2.64; HP Elite Slice G2 - Partner Ready With Microsoft Teams Rooms Firmware 2.64. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-27540 or the next vulnerability affects your stack