1. Home
  2. CVE Database
  3. CVE-2022-27540
HIGH · 7.8

CVE-2022-27540

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and inform...

Vulnerability Description

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HpElitebook 745 G4 Firmware< 1.45
HpElitebook 745 G4-
HpElitebook 745 G5 Firmware< 01.26.01
HpElitebook 745 G5-
HpElitebook 745 G6 Firmware< 01.26.00
HpElitebook 745 G6-
HpElitebook 755 G4 Firmware< 1.45
HpElitebook 755 G4-
HpElitebook 755 G5 Firmware< 01.26.01
HpElitebook 755 G5-
HpElitebook 820 G3 Firmware< 1.6
HpElitebook 820 G3-
HpElitebook 820 G4 Firmware< 1.48
HpElitebook 820 G4-
HpElitebook 828 G3 Firmware< 1.6
HpElitebook 828 G3-
HpElitebook 828 G4 Firmware< 1.48
HpElitebook 828 G4-
HpElitebook 830 13.3 Inch G9 Notebook Pc Firmware< 01.07.00
HpElitebook 830 13.3 Inch G9 Notebook Pc-

Related Weaknesses (CWE)

CWE-367

References

FAQ

What is CVE-2022-27540?

CVE-2022-27540 is a vulnerability with a CVSS score of 7.8 (HIGH). A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and inform...

How severe is CVE-2022-27540?

CVE-2022-27540 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-27540?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Elitebook 745 G4 Firmware, Hp Elitebook 745 G4, Hp Elitebook 745 G5 Firmware, Hp Elitebook 745 G5, Hp Elitebook 745 G6 Firmware.