CVE-2022-27538
High
Description
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
SeverityHigh
CVSS7.0
Exploit probability—
ProductHp Dragonfly Folio G3 2-in-1 Firmware
PublishedFeb 1, 2023
First seenFeb 1, 2023
Weakness typeCWE-367CWE-367
How to fix
Update
- hp dragonfly_folio_g3_2-in-1_firmware01.03.01 or later
- hp elite_dragonfly_firmware01.22.00 or later
- hp elite_dragonfly_g3_firmware01.04.00 or later
- hp elite_dragonfly_g2_firmware01.11.00 or later
- hp elite_dragonfly_max_firmware01.11.00 or later
- hp elite_x2_1013_g3_firmware01.22.00 or later
- hp elite_x2_g4_firmware01.22.00 or later
- hp elite_x2_g8_tablet_firmware01.11.00 or later
- hp elite_x360_1040_g9_2-in-1_firmware01.04.02 or later
- hp elitebook_1040_g9_firmware01.04.02 or later
- hp elitebook_1050_g1_firmware01.22.00 or later
- hp elitebook_630_g9_firmware01.05.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp dragonfly_folio_g3_2-in-1_firmware | v < 01.03.01 | 01.03.01 |
| hp elite_dragonfly_firmware | v < 01.22.00 | 01.22.00 |
| hp elite_dragonfly_g3_firmware | v < 01.04.00 | 01.04.00 |
| hp elite_dragonfly_g2_firmware | v < 01.11.00 | 01.11.00 |
| hp elite_dragonfly_max_firmware | v < 01.11.00 | 01.11.00 |
| hp elite_x2_1013_g3_firmware | v < 01.22.00 | 01.22.00 |
| hp elite_x2_g4_firmware | v < 01.22.00 | 01.22.00 |
| hp elite_x2_g8_tablet_firmware | v < 01.11.00 | 01.11.00 |
| hp elite_x360_1040_g9_2-in-1_firmware | v < 01.04.02 | 01.04.02 |
| hp elitebook_1040_g9_firmware | v < 01.04.02 | 01.04.02 |
| hp elitebook_1050_g1_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_630_g9_firmware | v < 01.05.00 | 01.05.00 |
| hp elitebook_640_g9_firmware | v < 01.05.00 | 01.05.00 |
| hp elitebook_645_g9_firmware | v < 01.09.00 | 01.09.00 |
| hp elitebook_650_g9_firmware | v < 01.05.00 | 01.05.00 |
| hp elitebook_655_g9_firmware | v < 01.09.00 | 01.09.00 |
| hp elitebook_735_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_735_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_745_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_745_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_755_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_830_g9_firmware | v < 01.04.02 | 01.04.02 |
| hp elitebook_830_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_830_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_830_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_830_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_835_g9_firmware | v < 01.03.01 | 01.03.01 |
| hp elitebook_835_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_835_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_836_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_836_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_840_g9_firmware | v < 01.04.02 | 01.04.02 |
| hp elitebook_840_aero_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_840_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_840_g5_healthcare_edition_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_840_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_840_g6_healthcare_edition_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_840_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_840_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_840r_g4_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_845_g9_firmware | v < 01.03.01 | 01.03.01 |
| hp elitebook_845_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_845_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_846_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_850_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_850_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_850_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_850_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_855_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_855_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_860_g9_firmware | v < 01.04.02 | 01.04.02 |
| hp elitebook_865_g9_firmware | v < 01.03.01 | 01.03.01 |
| hp elitebook_x360_1030_g3_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_x360_1030_g4_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_x360_1030_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_x360_1030_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_x360_1040_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_x360_1040_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_x360_1040_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_x360_1040_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_x360_830_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_x360_830_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp elitebook_x360_830_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp elitebook_x360_830_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp pro_x360_435_g9_firmware | v < 01.09.00 | 01.09.00 |
| hp pro_x360_fortis_g10_firmware | v < 01.04.00 | 01.04.00 |
| hp pro_x360_fortis_g9_firmware | v < 01.04.00 | 01.04.00 |
| hp probook_430_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_430_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_430_g7_firmware | v < 01.15.00 | 01.15.00 |
| hp probook_430_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_440_g9_firmware | v < 01.05.00 | 01.05.00 |
| hp probook_440_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_440_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_440_g7_firmware | v < 01.15.00 | 01.15.00 |
| hp probook_440_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_445_g9_firmware | v < 01.09.00 | 01.09.00 |
| hp probook_445_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_445_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_445_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_445r_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_450_g9_firmware | v < 01.05.00 | 01.05.00 |
| hp probook_450_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_450_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_450_g7_firmware | v < 01.15.00 | 01.15.00 |
| hp probook_450_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_455_g9_firmware | v < 01.09.00 | 01.09.00 |
| hp probook_455_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_455_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_455_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_455_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_455r_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_470_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_630_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_635_aero_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_635_aero_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_640_g4_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_640_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_640_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_640_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_645_g4_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_650_g4_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_650_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp probook_650_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_650_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_fortis_g10_firmware | v < 01.04.00 | 01.04.00 |
| hp probook_fortis_g9_firmware | v < 01.04.00 | 01.04.00 |
| hp probook_x360_11_g3_education_edition_firmware | v < 01.21.00 | 01.21.00 |
| hp probook_x360_11_g4_education_edition_firmware | v < 01.17.00 | 01.17.00 |
| hp probook_x360_11_g5_education_edition_firmware | v < 01.12.00 | 01.12.00 |
| hp probook_x360_11_g6_education_edition_firmware | v < 01.13.00 | 01.13.00 |
| hp probook_x360_11_g7_education_edition_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_x360_435_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_x360_435_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp probook_x360_440_g1_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_14u_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_14u_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_15_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_15_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_15u_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_15u_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_17_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_17_g6_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_create_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_firefly_14_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_firefly_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_firefly_g9_firmware | v < 01.04.02 | 01.04.02 |
| hp zbook_firefly_15_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_firefly_15_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_firefly_16_g9_firmware | v < 01.04.02 | 01.04.02 |
| hp zbook_fury_15_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_fury_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_fury_16_g9_firmware | v < 01.03.02 | 01.03.02 |
| hp zbook_fury_17_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_fury_17_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_power_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_power_g9_firmware | v < 01.04.01 | 01.04.01 |
| hp zbook_power_g7_firmware | No range specified | — |
| hp zbook_studio_g8_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_studio_16_g9_firmware | v < 01.04.01 | 01.04.01 |
| hp zbook_studio_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp zbook_studio_g7_firmware | v < 01.11.00 | 01.11.00 |
| hp zbook_studio_x360_g5_firmware | v < 01.22.00 | 01.22.00 |
| hp zhan_66_pro_13_g2_firmware | v < 01.22.00 | 01.22.00 |
| hp zhan_66_pro_14_g2_firmware | v < 01.22.00 | 01.22.00 |
| hp zhan_66_pro_14_g3_firmware | v < 01.15.00 | 01.15.00 |
| hp zhan_66_pro_14_g4_firmware | v < 01.11.00 | 01.11.00 |
| hp zhan_66_pro_g5_firmware | v < 01.05.00 | 01.05.00 |
| hp zhan_66_pro_15_g2_firmware | v < 01.22.00 | 01.22.00 |
| hp zhan_66_pro_15_g3_firmware | v < 01.15.00 | 01.15.00 |
| hp zhan_66_pro_a_14_g3_firmware | v < 01.11.00 | 01.11.00 |
| hp zhan_66_pro_a_14_g4_firmware | v < 01.11.00 | 01.11.00 |
| hp zhan_66_pro_a_14_g5_firmware | v < 01.09.00 | 01.09.00 |
| hp zhan_66_pro_g1_firmware | v < 01.22.00 | 01.22.00 |
| hp zhan_x_13_g2_firmware | v < 01.22.00 | 01.22.00 |
| hp elite_mini_600_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elite_mini_800_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elite_sff_600_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elite_sff_800_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elite_slice_firmware | v < 02.59 | 02.59 |
| hp elite_slice_g2_firmware | v < 02.59 | 02.59 |
| hp elite_tower_600_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elite_tower_680_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elite_tower_800_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elite_tower_880_g9_firmware | v < 02.06.00 | 02.06.00 |
| hp elitedesk_705_g4_desktop_mini_pc_firmware | v < 02.20.00 | 02.20.00 |
| hp elitedesk_705_g4_microtower_pc_firmware | v < 02.20.00 | 02.20.00 |
| hp elitedesk_705_g4_small_form_factor_pc_firmware | v < 02.20.00 | 02.20.00 |
| hp elitedesk_705_g5_desktop_mini_pc_firmware | v < 02.15.00 | 02.15.00 |
| hp elitedesk_705_g5_small_form_factor_pc_firmware | v < 02.15.00 | 02.15.00 |
| hp elitedesk_800_35w_g3_desktop_mini_pc_firmware | v < 02.44 | 02.44 |
| hp elitedesk_800_35w_g4_desktop_mini_pc_firmware | v < 02.21.00 | 02.21.00 |
| hp elitedesk_800_65w_g3_desktop_mini_pc_firmware | v < 02.44 | 02.44 |
| hp elitedesk_800_65w_g4_desktop_mini_pc_firmware | v < 02.21.00 | 02.21.00 |
| hp elitedesk_800_95w_g4_desktop_mini_pc_firmware | v < 02.21.00 | 02.21.00 |
| hp elitedesk_800_g3_small_form_factor_pc_firmware | v < 02.44 | 02.44 |
| hp elitedesk_800_g3_tower_pc_firmware | v < 02.44 | 02.44 |
| hp elitedesk_800_g4_small_form_factor_pc_firmware | v < 02.21.00 | 02.21.00 |
| hp elitedesk_800_g4_tower_pc_firmware | v < 02.21.00 | 02.21.00 |
| hp elitedesk_800_g5_desktop_mini_pc_firmware | v < 02.15.00 | 02.15.00 |
| hp elitedesk_800_g5_small_form_factor_pc_firmware | v < 02.15.00 | 02.15.00 |
| hp elitedesk_800_g5_tower_pc_firmware | v < 02.15.00 | 02.15.00 |
| hp elitedesk_800_g6_desktop_mini_pc_firmware | v < 02.13.00 | 02.13.00 |
| hp elitedesk_800_g6_small_form_factor_pc_firmware | v < 02.13.00 | 02.13.00 |
| hp elitedesk_800_g6_tower_pc_firmware | v < 02.13.00 | 02.13.00 |
| hp elitedesk_800_g8_desktop_mini_pc_firmware | v < 02.10.00 | 02.10.00 |
| hp elitedesk_800_g8_small_form_factor_pc_firmware | v < 02.10.00 | 02.10.00 |
| hp elitedesk_800_g8_tower_pc_firmware | v < 02.10.00 | 02.10.00 |
| hp elitedesk_805_g6_desktop_mini_pc_firmware | v < 02.10.00 | 02.10.00 |
| hp elitedesk_805_g6_small_form_factor_pc_firmware | v < 02.10.00 | 02.10.00 |
| hp elitedesk_805_g8_desktop_mini_pc_firmware | v < 02.06.00 | 02.06.00 |
| hp elitedesk_805_g8_small_form_factor_pc_firmware | v < 02.06.00 | 02.06.00 |
| hp elitedesk_880_g3_tower_pc_firmware | v < 02.44 | 02.44 |
| hp elitedesk_880_g4_tower_pc_firmware | v < 02.21.00 | 02.21.00 |
| hp elitedesk_880_g5_tower_pc_firmware | v < 02.15.00 | 02.15.00 |
| hp elitedesk_880_g6_tower_pc_firmware | v < 02.13.00 | 02.13.00 |
| hp elitedesk_880_g8_tower_pc_firmware | v < 02.10.00 | 02.10.00 |
| hp eliteone_1000_g1_23.8-in_all-in-one_business_pc_firmware | v < 02.44 | 02.44 |
| hp eliteone_1000_g1_23.8-in_touch_all-in-one_business_pc_firmware | v < 02.44 | 02.44 |
| hp eliteone_1000_g1_27-in_4k_uhd_all-in-one_business_pc_firmware | v < 02.44 | 02.44 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.