NetSight
high7.8

CVE-2022-43778

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code e…

Impact

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.

Affected products

VendorProductAffected versions
HpZcentral 4r Workstation Firmware
through 1.24
HpZ1 All-In-One G3 Workstation Firmware
through 1.33
HpElitebook 725 G4 Firmware
through 1.42
HpElitebook 745 G4 Firmware
through 1.42
HpElitebook 755 G4 Firmware
through 1.42
HpProbook 645 G3 Firmware
through 1.42
HpProbook 655 G3 Firmware
through 1.42
HpMt43 Mobile Thin Client Firmware
through 1.42
HpElite X2 1012 G2 Firmware
through 1.43
HpElitebook 1040 G4 Firmware
through 1.43
HpElitebook 820 G4 Firmware
through 1.43
HpElitebook 828 G4 Firmware
through 1.43

Weakness classification

References