Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8x49-r627-jgw5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

EPSS

Процентиль: 55%
0.00322
Низкий

Связанные уязвимости

CVSS3: 7.2
nvd
больше 6 лет назад

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

CVSS3: 7.2
fstec
больше 6 лет назад

Уязвимость компонента EFI_BOOT_SERVICES микропрограммного обеспечения настольных рабочих станций, персональных компьютеров и кассовых аппаратов компании Hewlett-Packard Development Company L.P, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 55%
0.00322
Низкий