What’s Vulnerable › Vulnerabilities
CVE-2022-27541
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-06-12 · updated 2026-06-17
- Weakness: CWE-367
Description
Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
Affected products
- HP Dragonfly Folio 13.5 Inch G3 2-In-1 Notebook Pc Firmware: through 0.10.103
- HP Elite Dragonfly 13.5 Inch G3 Notebook Pc Firmware: through 01.03.01
- HP Elite Dragonfly Firmware: through 01.21.01
- HP Elite Dragonfly G2 Firmware: through 01.09.10
- HP Elite Dragonfly Max Firmware: through 01.09.10
- HP Elite Mini 600 G9 Desktop Pc Firmware: through 02.05.00
- HP Elite Mini 800 G9 Desktop Pc Firmware: through 02.05.00
- HP Elite Sff 600 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Sff 800 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Slice Firmware: through 2.58
- HP Elite Slice For Meeting Rooms Firmware: through 2.58
- HP Elite Slice G2 - Audio Ready With Zoom Rooms Firmware: through 2.58
- HP Elite Slice G2 - Partner Ready With Microsoft Teams Rooms Firmware: through 2.58
- HP Elite Slice G2 With Intel Unite Firmware: through 2.58
- HP Elite Slice G2 With Microsoft Teams Rooms Firmware: through 2.58
- HP Elite Slice G2 With Zoom Rooms Firmware: through 2.58
- HP Elite Tower 600 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Tower 680 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Tower 800 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Tower 880 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite X2 1012 G1 Firmware: through 1.57
- HP Elite X2 1012 G1 Tablet Firmware: through 1.57
- HP Elite X2 1012 G1 Tablet With Travel Keyboard Firmware: through 1.57
- HP Elite X2 1012 G2 Firmware: through 1.43
- HP Elite X2 1013 G3 Firmware: through 01.21.01
- HP Elite X2 G4 Firmware: through 01.21.01
- HP Elite X2 G8 Tablet Firmware: through 01.09.10
- HP Elite X360 1040 14 Inch G9 2-In-1 Notebook Pc Firmware: through 01.03.01
- HP Elite X360 830 13 Inch G9 2-In-1 Notebook Pc Firmware: through 01.03.01
- HP Elitebook 1030 G1 Firmware: through 1.57
References
- https://support.hp.com/us-en/document/ish_7709808-7709835-16/hpsbhf03835
- https://support.hp.com/us-en/document/ish_7709808-7709835-16/hpsbhf03835
Get alerted when CVE-2022-27541 or the next vulnerability affects your stack