CVE-2022-31635
High
Description
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHp Zcentral 4r Workstation Firmware
PublishedJun 13, 2023
First seenJun 13, 2023
Weakness typeCWE-367CWE-367
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp zcentral_4r_workstation_firmware | v ≤ 1.24 | — |
| hp z1_all-in-one_g3_workstation_firmware | v ≤ 1.33 | — |
| hp elitebook_725_g4_firmware | v ≤ 1.42 | — |
| hp elitebook_745_g4_firmware | v ≤ 1.42 | — |
| hp elitebook_755_g4_firmware | v ≤ 1.42 | — |
| hp probook_645_g3_firmware | v ≤ 1.42 | — |
| hp probook_655_g3_firmware | v ≤ 1.42 | — |
| hp mt43_mobile_thin_client_firmware | v ≤ 1.42 | — |
| hp elite_x2_1012_g2_firmware | v ≤ 1.43 | — |
| hp elitebook_1040_g4_firmware | v ≤ 1.43 | — |
| hp elitebook_820_g4_firmware | v ≤ 1.43 | — |
| hp elitebook_828_g4_firmware | v ≤ 1.43 | — |
| hp elitebook_840_g4_firmware | v ≤ 1.43 | — |
| hp elitebook_848_g4_firmware | v ≤ 1.43 | — |
| hp elitebook_850_g4_firmware | v ≤ 1.43 | — |
| hp elitebook_x360_1020_g2_firmware | v ≤ 1.43 | — |
| hp elitebook_x360_1030_g2_firmware | v ≤ 1.43 | — |
| hp pro_x2_612_g2_firmware | v ≤ 1.43 | — |
| hp probook_455_g4_firmware | v ≤ 1.43 | — |
| hp probook_640_g3_firmware | v ≤ 1.43 | — |
| hp probook_650_g3_firmware | v ≤ 1.43 | — |
| hp zbook_14u_g4_firmware | v ≤ 1.43 | — |
| hp zbook_15_g4_firmware | v ≤ 1.43 | — |
| hp zbook_15u_g4_firmware | v ≤ 1.43 | — |
| hp zbook_17_g4_firmware | v ≤ 1.43 | — |
| hp zbook_studio_g4_firmware | v ≤ 1.43 | — |
| hp zbook_x2_g4_firmware | v ≤ 1.43 | — |
| hp probook_x360_11_g2_ee_firmware | v ≤ 1.45 | — |
| hp elitebook_725_g3_firmware | v ≤ 1.55 | — |
| hp elitebook_745_g3_firmware | v ≤ 1.55 | — |
| hp elitebook_755_g3_firmware | v ≤ 1.55 | — |
| hp probook_455_g3_firmware | v ≤ 1.55 | — |
| hp probook_645_g2_firmware | v ≤ 1.55 | — |
| hp probook_655_g2_firmware | v ≤ 1.55 | — |
| hp elite_x2_1012_g1_firmware | v ≤ 1.57 | — |
| hp elite_x2_1012_g1_tablet_firmware | v ≤ 1.57 | — |
| hp elite_x2_1012_g1_tablet_with_travel_keyboard_firmware | v ≤ 1.57 | — |
| hp elitebook_1030_g1_firmware | v ≤ 1.57 | — |
| hp elitebook_1040_g3_firmware | v ≤ 1.57 | — |
| hp elitebook_820_g3_firmware | v ≤ 1.57 | — |
| hp elitebook_828_g3_firmware | v ≤ 1.57 | — |
| hp elitebook_840_g3_firmware | v ≤ 1.57 | — |
| hp elitebook_848_g3_firmware | v ≤ 1.57 | — |
| hp elitebook_850_g3_firmware | v ≤ 1.57 | — |
| hp elitebook_folio_g1_firmware | v ≤ 1.57 | — |
| hp probook_11_ee_g2_firmware | v ≤ 1.57 | — |
| hp probook_430_g3_firmware | v ≤ 1.57 | — |
| hp probook_440_g3_firmware | v ≤ 1.57 | — |
| hp probook_446_g3_firmware | v ≤ 1.57 | — |
| hp probook_450_g3_firmware | v ≤ 1.57 | — |
| hp probook_470_g3_firmware | v ≤ 1.57 | — |
| hp probook_640_g2_firmware | v ≤ 1.57 | — |
| hp probook_650_g2_firmware | v ≤ 1.57 | — |
| hp zbook_15_g3_firmware | v ≤ 1.57 | — |
| hp zbook_15u_g3_firmware | v ≤ 1.57 | — |
| hp zbook_17_g3_firmware | v ≤ 1.57 | — |
| hp zbook_studio_g3_firmware | v ≤ 1.57 | — |
| hp z2_mini_g3_workstation_firmware | v ≤ 1.85 | — |
| hp z238_microtower_workstation_firmware | v ≤ 1.85 | — |
| hp z240_small_form_factor_workstation_firmware | v ≤ 1.85 | — |
| hp z240_tower_workstation_firmware | v ≤ 1.85 | — |
| hp elitedesk_705_g3_desktop_mini_pc_firmware | v ≤ 2.4 | — |
| hp elitedesk_705_g3_microtower_pc_firmware | v ≤ 2.4 | — |
| hp elitedesk_705_g3_small_form_factor_pc_firmware | v ≤ 2.4 | — |
| hp elitedesk_800_35w_g3_desktop_mini_pc_firmware | v ≤ 2.53 | — |
| hp elitedesk_800_65w_g3_desktop_mini_pc_firmware | v ≤ 2.53 | — |
| hp elitedesk_800_g3_small_form_factor_pc_firmware | v ≤ 2.53 | — |
| hp elitedesk_800_g3_tower_pc_firmware | v ≤ 2.53 | — |
| hp elitedesk_880_g3_tower_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_1000_g1_23.8-in_all-in-one_business_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_1000_g1_23.8-in_touch_all-in-one_business_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_1000_g1_27-in_4k_uhd_all-in-one_business_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_1000_g1_34-in_curved_all-in-one_business_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_800_g3_23.8_non-touch_healthcare_edition_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_800_g3_23.8-inch_non-touch_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_800_g3_23.8-inch_non-touch_gpu_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_800_g3_23.8-inch_touch_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp eliteone_800_g3_23.8-inch_touch_gpu_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_400_g3_desktop_mini_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_400_g4_microtower_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_400_g4_small_form_factor_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_480_g4_microtower_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_600_g3_desktop_mini_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_600_g3_microtower_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_600_g3_small_form_factor_pc_firmware | v ≤ 2.53 | — |
| hp prodesk_680_g3_microtower_pc_firmware | v ≤ 2.53 | — |
| hp proone_400_g3_20-inch_non-touch_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp proone_400_g3_20-inch_touch_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp proone_480_g3_20-inch_non-touch_all-in_one_pc_firmware | v ≤ 2.53 | — |
| hp proone_600_g3_21.5-inch_non-touch_all-in-one_pc_firmware | v ≤ 2.53 | — |
| hp engage_one_all-in-one_system_firmware | v ≤ 2.53 | — |
| hp elite_slice_firmware | v ≤ 2.58 | — |
| hp elite_slice_for_meeting_rooms_firmware | v ≤ 2.58 | — |
| hp elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware | v ≤ 2.58 | — |
| hp elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms_firmware | v ≤ 2.58 | — |
| hp elite_slice_g2_with_microsoft_teams_rooms_firmware | v ≤ 2.58 | — |
| hp elite_slice_g2_with_intel_unite_firmware | v ≤ 2.58 | — |
| hp elite_slice_g2_with_zoom_rooms_firmware | v ≤ 2.58 | — |
| hp elitedesk_800_35w_g2_desktop_mini_pc_firmware | v ≤ 2.58 | — |
| hp elitedesk_800_65w_g2_desktop_mini_pc_firmware | v ≤ 2.58 | — |
| hp eliteone_800_g2_23-inch_non-touch_all-in-one_pc_firmware | v ≤ 2.58 | — |
| hp eliteone_800_g2_23-inch_touch_all-in-one_pc_firmware | v ≤ 2.58 | — |
| hp prodesk_400_g2_desktop_mini_pc_firmware | v ≤ 2.58 | — |
| hp prodesk_600_g2_desktop_mini_pc_firmware | v ≤ 2.58 | — |
| hp proone_400_g2_20-inch_non-touch_all-in-one_pc_firmware | v ≤ 2.58 | — |
| hp proone_400_g2_20-inch_touch_all-in-one_pc_firmware | v ≤ 2.58 | — |
| hp proone_600_g2_21.5-inch_non-touch_all-in-one_pc_firmware | v ≤ 2.58 | — |
| hp proone_600_g2_21.5-inch_touch_all-in-one_pc_firmware | v ≤ 2.58 | — |
| hp rp9_g1_retail_system_firmware | v ≤ 2.58 | — |
| hp z440_workstation_firmware | v ≤ 2.61 | — |
| hp z640_workstation_firmware | v ≤ 2.61 | — |
| hp z840_workstation_firmware | v ≤ 2.61 | — |
| hp z4_g4_workstation_\(core-x\)_firmware | v ≤ 2.85 | — |
| hp z4_g4_workstation_\(xeon_w\)_firmware | v ≤ 2.85 | — |
| hp z8_g4_workstation_firmware | v ≤ 2.85 | — |
| hp dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware | v ≤ 0.10.103 | — |
| hp elitebook_835_13_inch_g9_notebook_pc_firmware | v ≤ 01.02.01 | — |
| hp elitebook_845_14_inch_g9_notebook_pc_firmware | v ≤ 01.02.01 | — |
| hp elitebook_865_16_inch_g9_notebook_pc_firmware | v ≤ 01.02.01 | — |
| hp pro_x360_fortis_11_inch_g10_notebook_pc_firmware | v ≤ 01.03.00 | — |
| hp pro_x360_fortis_11_inch_g9_notebook_pc_firmware | v ≤ 01.03.00 | — |
| hp probook_fortis_14_inch_g10_notebook_pc_firmware | v ≤ 01.03.00 | — |
| hp probook_fortis_14_inch_g9_notebook_pc_firmware | v ≤ 01.03.00 | — |
| hp zbook_power_15.6_inch_g9_mobile_workstation_pc_firmware | v ≤ 01.03.00 | — |
| hp elite_dragonfly_13.5_inch_g3_notebook_pc_firmware | v ≤ 01.03.01 | — |
| hp elite_x360_1040_14_inch_g9_2-in-1_notebook_pc_firmware | v ≤ 01.03.01 | — |
| hp elite_x360_830_13_inch_g9_2-in-1_notebook_pc_firmware | v ≤ 01.03.01 | — |
| hp elitebook_1040_14_inch_g9_notebook_pc_firmware | v ≤ 01.03.01 | — |
| hp elitebook_830_13.3_inch_g9_notebook_pc_firmware | v ≤ 01.03.01 | — |
| hp elitebook_840_14_inch_g9_notebook_pc_firmware | v ≤ 01.03.01 | — |
| hp elitebook_860_16_inch_g9_notebook_pc_firmware | v ≤ 01.03.01 | — |
| hp zbook_firefly_14_inch_g9_mobile_workstation_pc_firmware | v ≤ 01.03.01 | — |
| hp zbook_firefly_16_inch_g9_mobile_workstation_pc_firmware | v ≤ 01.03.01 | — |
| hp zbook_studio_16_inch_g9_mobile_workstation_pc_firmware | v ≤ 01.03.01 | — |
| hp zbook_fury_16_g9_mobile_workstation_pc_firmware | v ≤ 01.03.02 | — |
| hp elitebook_630_13_inch_g9_notebook_pc_firmware | v ≤ 01.04.00 | — |
| hp elitebook_640_14_inch_g9_notebook_pc_firmware | v ≤ 01.04.00 | — |
| hp elitebook_650_15.6_inch_g9_notebook_pc_firmware | v ≤ 01.04.00 | — |
| hp probook_440_14_inch_g9_notebook_pc_firmware | v ≤ 01.04.00 | — |
| hp probook_450_15.6_inch_g9_notebook_pc_firmware | v ≤ 01.04.00 | — |
| hp zhan_66_pro_14_inch_g5_notebook_pc_firmware | v ≤ 01.04.00 | — |
| hp z2_mini_g9_workstation_firmware | v ≤ 01.04.00 | — |
| hp z2_small_form_factor_g9_workstation_firmware | v ≤ 01.04.00 | — |
| hp z2_tower_g9_workstation_firmware | v ≤ 01.04.00 | — |
| hp z2_mini_g5_workstation_firmware | v ≤ 01.04.07 | — |
| hp z2_small_form_factor_g5_workstation_firmware | v ≤ 01.04.07 | — |
| hp z2_tower_g5_workstation_firmware | v ≤ 01.04.07 | — |
| hp pro_mt440_g3_mobile_thin_client_firmware | v ≤ 01.05.00 | — |
| hp z2_small_form_factor_g8_workstation_firmware | v ≤ 01.05.02 | — |
| hp z2_tower_g8_workstation_firmware | v ≤ 01.05.02 | — |
| hp elitebook_645_14_inch_g9_notebook_pc_firmware | v ≤ 01.08.01 | — |
| hp elitebook_655_15.6_inch_g9_notebook_pc_firmware | v ≤ 01.08.01 | — |
| hp probook_445_14_inch_g9_notebook_pc_firmware | v ≤ 01.08.01 | — |
| hp probook_455_15.6_inch_g9_notebook_pc_firmware | v ≤ 01.08.01 | — |
| hp zhan_66_pro_a_14_g5_notebook_pc_firmware | v ≤ 01.08.01 | — |
| hp z2_mini_g4_workstation_firmware | v ≤ 01.08.03 | — |
| hp z2_small_form_factor_g4_workstation_firmware | v ≤ 01.08.03 | — |
| hp z2_tower_g4_workstation_firmware | v ≤ 01.08.03 | — |
| hp elite_dragonfly_g2_firmware | v ≤ 01.09.10 | — |
| hp elite_dragonfly_max_firmware | v ≤ 01.09.10 | — |
| hp elite_x2_g8_tablet_firmware | v ≤ 01.09.10 | — |
| hp elitebook_830_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_835_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_840_aero_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_840_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_845_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_850_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_855_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_x360_1030_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_x360_1040_g8_firmware | v ≤ 01.09.10 | — |
| hp elitebook_x360_830_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_430_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_440_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_445_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_450_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_455_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_630_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_635_aero_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_640_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_650_g8_firmware | v ≤ 01.09.10 | — |
| hp probook_x360_11_g7_ee_firmware | v ≤ 01.09.10 | — |
| hp probook_x360_435_g8_notebook_pc_firmware | v ≤ 01.09.10 | — |
| hp zbook_firefly_14_inch_g8_mobile_workstation_pc_firmware | v ≤ 01.09.10 | — |
| hp zbook_firefly_15.6_inch_g8_mobile_workstation_pc_firmware | v ≤ 01.09.10 | — |
| hp zbook_power_15.6_inch_g8_mobile_workstation_pc_firmware | v ≤ 01.09.10 | — |
| hp zhan_66_pro_14_g4_notebook_pc_firmware | v ≤ 01.09.10 | — |
| hp zhan_66_pro_a_14_g4_notebook_pc_firmware | v ≤ 01.09.10 | — |
| hp zbook_fury_15.6_inch_g8_mobile_workstation_pc_firmware | v ≤ 01.09.11 | — |
| hp zbook_fury_17.3_inch_g8_mobile_workstation_pc_firmware | v ≤ 01.09.11 | — |
| hp zbook_studio_15.6_inch_g8_mobile_workstation_pc_firmware | v ≤ 01.09.11 | — |
| hp elitebook_830_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_835_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_840_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_845_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_850_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_855_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_x360_1030_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_x360_1040_g7_firmware | v ≤ 01.10.00 | — |
| hp elitebook_x360_830_g7_firmware | v ≤ 01.10.00 | — |
| hp probook_445_g7_firmware | v ≤ 01.10.00 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.