CVSS: 7.0EPSS: 0%CPEs: 634EXPL: 0CVE-2022-27538
https://notcve.org/view.php?id=CVE-2022-27538
30 Jan 2023 — A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. • https://support.hp.com/us-en/document/ish_7387020-7387107-16/hpsbhf03827 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 8.4EPSS: 0%CPEs: 40EXPL: 0CVE-2021-3661
https://notcve.org/view.php?id=CVE-2021-3661
21 Nov 2022 — A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability. Se ha identificado una posible vulnerabilidad de seguridad en HP Workstation BIOS (firmware UEFI) que puede permitir la ejecución de código arbitrario. HP está lanzando mitigaciones de firmware para la posible vulnerabilidad. • https://support.hp.com/us-en/document/ish_5670997-5671021-16/hpsbhf03770 •