CVE-2022-43779: High severity hp 348 g4 firmware vulnerability
Published Feb 3, 2023
·Updated
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code execution, denial of service, and information disclosure. AMI has released updates to mitigate the potential vulnerability.
Affected Software
100 affected components
All of the following
HP 348 G4 Firmware<f.65
HP 348 G4
All of the following
HP 260 G2 Desktop Mini Firmware<2.26
HP 260 G2 Desktop Mini
All of the following
HP 218 Pro G5 Mt Firmware<f15
HP 218 Pro G5 Mt
All of the following
HP 260 G3 Desktop Mini Firmware<02.20.00
HP 260 G3 Desktop Mini
All of the following
HP 260 G4 Desktop Mini Firmware<02.12.00
HP 260 G4 Desktop Mini
All of the following
HP 280 G3 Microtower Pc Firmware<02.02.40
HP 280 G3 Microtower Pc
All of the following
HP 280 G3 Pci Microtower Pc Firmware<02.02.40
HP 280 G3 Pci Microtower Pc
All of the following
HP 288 Pro G3 Microtower Pc Firmware<00.02.40
HP 288 Pro G3 Microtower Pc
All of the following
HP 290 G1 Microtower Firmware<00.02.40
HP 290 G1 Microtower
All of the following
HP Desktop Pro 300 G3 Firmware<f15
HP Desktop Pro 300 G3
All of the following
HP Desktop Pro A 300 G3 Firmware<f12
HP Desktop Pro A 300 G3
All of the following
HP Desktop Pro A G2 Firmware<f.11
HP Desktop Pro A G2
All of the following
HP Desktop Pro A G2 Microtower Firmware<f.11
HP Desktop Pro A G2 Microtower
All of the following
HP Desktop Pro A G3 Firmware<f12
HP Desktop Pro A G3
All of the following
HP Desktop Pro A G3 Microtower Firmware<f12
HP Desktop Pro A G3 Microtower
All of the following
HP Desktop Pro G3 Firmware<f15
HP Desktop Pro G3
All of the following
HP Desktop Pro G3 Microtower Firmware<f15
HP Desktop Pro G3 Microtower
All of the following
HP Desktop Pro Microtower Firmware<00.02.40
HP Desktop Pro Microtower
All of the following
HP Zhan 66 Pro A G1 Microtower Firmware<f.11
HP Zhan 66 Pro A G1 Microtower
All of the following
HP Zhan 66 Pro A G1 R Microtower Firmware<f12
HP Zhan 66 Pro A G1 R Microtower
All of the following
HP Zhan 66 Pro G1 R Microtower Firmware<f15
HP Zhan 66 Pro G1 R Microtower
All of the following
HP Zhan 86 Pro G1 Microtower Firmware<00.02.40
HP Zhan 86 Pro G1 Microtower
All of the following
HP Rp2 Retail System 2000 Firmware<2.24
HP Rp2 Retail System 2000
All of the following
HP Rp2 Retail System 2020 Firmware<2.24
HP Rp2 Retail System 2020
All of the following
HP Rp2 Retail System 2030 Firmware<2.24
HP Rp2 Retail System 2030
HP 348 G4 Firmware<f.65
HP 348 G4
HP 260 G2 Desktop Mini Firmware<2.26
HP 260 G2 Desktop Mini
HP 218 Pro G5 Mt Firmware<f15
HP 218 Pro G5 Mt
HP 260 G3 Desktop Mini Firmware<02.20.00
HP 260 G3 Desktop Mini
HP 260 G4 Desktop Mini Firmware<02.12.00
HP 260 G4 Desktop Mini
HP 280 G3 Microtower Pc Firmware<02.02.40
HP 280 G3 Microtower Pc
HP 280 G3 Pci Microtower Pc Firmware<02.02.40
HP 280 G3 Pci Microtower Pc
HP 288 Pro G3 Microtower Pc Firmware<00.02.40
HP 288 Pro G3 Microtower Pc
HP 290 G1 Microtower Firmware<00.02.40
HP 290 G1 Microtower
HP Desktop Pro 300 G3 Firmware<f15
HP Desktop Pro 300 G3
HP Desktop Pro A 300 G3 Firmware<f12
HP Desktop Pro A 300 G3
HP Desktop Pro A G2 Firmware<f.11
HP Desktop Pro A G2
HP Desktop Pro A G2 Microtower Firmware<f.11
HP Desktop Pro A G2 Microtower
HP Desktop Pro A G3 Firmware<f12
HP Desktop Pro A G3
HP Desktop Pro A G3 Microtower Firmware<f12
HP Desktop Pro A G3 Microtower
HP Desktop Pro G3 Firmware<f15
HP Desktop Pro G3
HP Desktop Pro G3 Microtower Firmware<f15
HP Desktop Pro G3 Microtower
HP Desktop Pro Microtower Firmware<00.02.40
HP Desktop Pro Microtower
HP Zhan 66 Pro A G1 Microtower Firmware<f.11
HP Zhan 66 Pro A G1 Microtower
HP Zhan 66 Pro A G1 R Microtower Firmware<f12
HP Zhan 66 Pro A G1 R Microtower
HP Zhan 66 Pro G1 R Microtower Firmware<f15
HP Zhan 66 Pro G1 R Microtower
HP Zhan 86 Pro G1 Microtower Firmware<00.02.40
HP Zhan 86 Pro G1 Microtower
HP Rp2 Retail System 2000 Firmware<2.24
HP Rp2 Retail System 2000
HP Rp2 Retail System 2020 Firmware<2.24
HP Rp2 Retail System 2020
HP Rp2 Retail System 2030 Firmware<2.24
HP Rp2 Retail System 2030
Remediation
Event History
Feb 3, 2023
CVE Published
via MITRE·04:42 PM
Data Sourced
via MITRE·04:42 PM
Description
Feb 12, 2023
Data Sourced
via NVD·04:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-43779?
CVE-2022-43779 is a Time-of-Check to Time-of-Use (TOCTOU) vulnerability identified in certain HP PC products using AMI UEFI Firmware, which can lead to arbitrary code execution, denial of service, and information disclosure.
2
How severe is CVE-2022-43779?
CVE-2022-43779 has a severity rating of 7 (High).
3
Which HP PC products are affected by CVE-2022-43779?
Certain HP PC products using AMI UEFI Firmware are affected by CVE-2022-43779. Please refer to the official HP advisory for a complete list.
4
How can I mitigate CVE-2022-43779?
To mitigate CVE-2022-43779, HP has released updates for the affected HP PC products. Please refer to the official HP advisory for specific instructions and firmware updates.
5
Where can I find more information about CVE-2022-43779?
You can find more information about CVE-2022-43779, including detailed advisory and remediation steps, on the official HP support website.