CVE-2023-5410 — Observable Discrepancy in INC HP PC Bios

CWE-203 — Observable Discrepancy3 documents3 sources
Severity
8.2HIGHNVD
EPSS
0.0%
top 92.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
HP INC HP PC Bios
Timeline
PublishedMar 12

Description

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 1.5 | Impact: 6.0

Affected Packages1 packages

▶CVEListV5hp_inc/hp_pc_biosSee HP Security Bulletin reference for affected versions

🔴Vulnerability Details

2
GHSA
GHSA-q7gc-j674-5xp7: A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering↗2024-03-12
▶
CVEList
CVE-2023-5410: A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering↗2024-03-12
▶
CVE-2023-5410 — Observable Discrepancy | cvebase