CVE-2017-2751: Medium severity hp 240 g1 firmware vulnerability
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2751?
CVE-2017-2751 is considered a medium severity vulnerability as it allows unauthorized access to stored BIOS passwords.
How do I fix CVE-2017-2751?
To fix CVE-2017-2751, update the BIOS firmware to the latest version provided by HP that addresses this vulnerability.
Which HP notebooks are affected by CVE-2017-2751?
CVE-2017-2751 affects several HP consumer notebooks launched in early 2014 with specific firmware versions, including HP 240 G1, 245 G1, and Envy models.
What is the impact of CVE-2017-2751 on system security?
The impact of CVE-2017-2751 is significant, as it potentially allows attackers to extract BIOS passwords, compromising the security of the affected systems.
How can I determine if my firmware version is vulnerable to CVE-2017-2751?
You can determine if your firmware version is vulnerable to CVE-2017-2751 by checking the BIOS version against the list of affected versions provided by HP.