CVE-2023-5410

Published: Mar 12, 2024Modified: Jun 17, 2026Deferred

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (2)

https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924

Source: hp-security-alert@hp.com

https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.