CVE-2016-2243: High severity hp elitebook 725 g3 firmware vulnerability
Published Mar 4, 2016
·Updated
Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access.
Affected Software
38 affected components
HP Elitebook 725 G3
HP Elitebook 745 G3
HP Elitebook 755 G3
HP 700 Series Firmware=1.08
HP Elitedesk 800 G2 Twr
HP Elitedesk 800 Sff
HP 800 Series Firmware=2.09
HP Z240 Sff Workstation N51
HP Z240 Tower Workstation N51
HP Z240 Firmware=1.11
HP 700 Series Firmware=2.09
HP Elitedesk 705 G2 Mt Sff
HP Z238 Microtower Workstation N51
HP Z238 Firmware=1.11
HP Zbook 15 G3
HP Zbook 15u G3
HP Zbook 17 G3
HP Zbook Firmware=1.03
HP Elitedesk 800 G2 Dm
HP Mp9 G2 Retail System
Samsung X14j Firmware=t-ms14jakucb-1102.5
HP 800 Series Firmware=2.1
HP Elitebook 820 G3
HP Elitebook 840 G3
HP Elitebook 850 G3
HP 1000 Series Firmware=1.04
HP Elitebook Folio 1012 X2 G2
HP 1000 Series Firmware=1.1
HP Elitebook Folio 1040 G3
HP 1000 Series Firmware=1.01
HP Elitedesk 705 G2 Dm
HP 700 Series Firmware=2.05
HP Mt42 Mobile Thin Client
HP 700 Series Firmware=1.05
HP Zbook Studio G3
HP Zbook Firmware=1.04
Zyxel GS1900-10HP firmware<2.50\(aazi.0\)c0
HP 700 Series Firmware=2.07
Event History
Mar 4, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2243?
CVE-2016-2243 has a severity rating that indicates it can lead to a denial of service through BIOS recovery failure.
2
How do I fix CVE-2016-2243?
To fix CVE-2016-2243, users should update to the latest firmware versions provided by HP.
3
Which HP systems are affected by CVE-2016-2243?
CVE-2016-2243 affects specific HP Commercial PCs and laptops that use the vulnerable firmware versions.
4
Is there a workaround for CVE-2016-2243?
Currently, disabling administrative access may prevent exploitation of CVE-2016-2243, but updating firmware is the recommended solution.
5
What type of vulnerability is CVE-2016-2243?
CVE-2016-2243 is classified as a local denial of service vulnerability affecting the BIOS.