High WID-SEC-2023-0165 5 CVEs

HP BIOS UEFI Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Feb 16, 2022 · Updated Jan 22, 2023 · Revision 2 · de-DE

Vendor: HP Vendor: HPE Product: BIOS UEFI Firmware Product: ProLiant

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im HP BIOS in der UEFI Firmware ausnutzen, um seine Privilegien zu erhöhen.

Product

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Vulnerabilities 5

High 7.8

CVE-2021-39297

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …

Feb 16, 2022
High 7.8

CVE-2021-39299

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …

Feb 16, 2022
High 7.8

CVE-2021-39301

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …

Feb 16, 2022
High 7.3

CVE-2021-39300

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …

Feb 16, 2022
Medium 6.5

CVE-2021-39298

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…

AMD 3rd Gen EPYC 2nd Gen EPYC Ryzen 5000 Series

Feb 16, 2022

Revision history

2023-01-22 #2
Neue Updates von HP aufgenommen
2022-02-16 #1
Initiale Fassung

References

HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04404
HP Customer Support - Knowledge Base vom 2022-02-16
https://support.hp.com/us-en/document/ish_5661066-5661090-16