medium4.6
CVE-2017-2751
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others.
Impact
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Hp 240 G1 Firmware | before f.48 |
| Hp | Hp 245 G1 Firmware | before f.48 |
| Hp | Hp 1000-1300 Firmware | before f.48 |
| Hp | Hp 250 G1 Notebook Pc Firmware | before f.47 |
| Hp | Hp 255 G1 Notebook Pc Firmware | before f.47 |
| Hp | Hp Envy 15-J000 Firmware | before f.22 |
| Hp | Hp Envy 15-J100 Firmware | before f.71 |
| Hp | Hp Pavilion 15-N000 Firmware | before f.72 |
| Hp | Hp 246 Firmware | before f.04 |
| Hp | Hp 455 Firmware | before f.08 |
| Hp | Hp Envy 17 J100 Firmware | before f.71 |
| Hp | Hp Envy 17-J100 Leap Motion Se Firmware | before f.71 |