CVE-2017-2751
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.
- Score
- CVSS 3.0 4.6 Medium
- Status
- Modified - hp-security-alert@hp.com
- Published
- 2018-10-03
- Last modified
- 2024-09-16
- Weaknesses
- CWE-522
Affected products
- Compaq 14-h000 Firmware (Hp)
- Compaq 14-s000 Firmware (Hp)
- Compaq Cq45-900 Firmware (Hp)
- Hp 1000-1300 Firmware (Hp)
- Hp 14-g000 Firmware (Hp)
- Hp 14-r000 Firmware (Hp)
- Hp 15-r000 Firmware (Hp)
- Hp 15-r500 Firmware (Hp)
- Hp 240 G1 Firmware (Hp)
- Hp 240 G3 Firmware (Hp)
- Hp 245 G1 Firmware (Hp)
- Hp 246 Firmware (Hp)
- Hp 246 G3 Firmware (Hp)
- Hp 250 G1 Notebook Pc Firmware (Hp)
- Hp 255 G1 Notebook Pc Firmware (Hp)
- Hp 255 G3 Firmware (Hp)
- Hp 455 Firmware (Hp)
- Hp Envy 100 Firmware (Hp)
- Hp Envy 14-k100 Firmware (Hp)
- Hp Envy 15-j000 Firmware (Hp)
- Hp Envy 15-j100 Firmware (Hp)
- Hp Envy 17-j100 Leap Motion Se Firmware (Hp)
- Hp Envy 17 J100 Firmware (Hp)
- Hp Envy M6-n000 Firmware (Hp)
- Hp G14-a000 Firmware (Hp)
- Hp Pavilion 10-f000 Firmware (Hp)
- Hp Pavilion 11-n000 Firmware (Hp)
- Hp Pavilion 14-n000 Firmware (Hp)
- Hp Pavilion 15-n000 Firmware (Hp)
- Hp Pavilion 15-n200 Firmware (Hp)
- Hp Pavilion 15-n300 Firmware (Hp)
- Hp Spectre 13-h200 Firmware (Hp)
- Hp Spectre X2 13-smb Pro Firmware (Hp)
- Hp Split 13-g200 Firmware (Hp)
- Hp 240 G1 Notebook Pc And Certain Other Consumer Notebooks (Hp Inc.)
References
- https://support.hp.com/us-en/document/c05913581
