CVE-2022-43779: HP 218 Pro g5 Mt Firmware

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code execution, denial of service, and information disclosure. AMI has released updates to mitigate the potential vulnerability.

Affected products

• HP 218 Pro g5 Mt Firmware: before f15 (fixed in f15)
• HP 260 g2 Desktop Mini Firmware: before 2.26 (fixed in 2.26)
• HP 260 g3 Desktop Mini Firmware: before 02.20.00 (fixed in 02.20.00)
• HP 260 g4 Desktop Mini Firmware: before 02.12.00 (fixed in 02.12.00)
• HP 280 g3 Microtower Pc Firmware: before 02.02.40 (fixed in 02.02.40)
• HP 280 g3 Pci Microtower Pc Firmware: before 02.02.40 (fixed in 02.02.40)
• HP 288 Pro g3 Microtower Pc Firmware: before 00.02.40 (fixed in 00.02.40)
• HP 290 g1 Microtower Firmware: before 00.02.40 (fixed in 00.02.40)
• HP 348 g4 Firmware: before f.65 (fixed in f.65)
• HP Desktop Pro 300 g3 Firmware: before f15 (fixed in f15)
• HP Desktop Pro A 300 g3 Firmware: before f12 (fixed in f12)
• HP Desktop Pro A g2 Firmware: before f.11 (fixed in f.11)
• HP Desktop Pro A g2 Microtower Firmware: before f.11 (fixed in f.11)
• HP Desktop Pro A g3 Firmware: before f12 (fixed in f12)
• HP Desktop Pro A g3 Microtower Firmware: before f12 (fixed in f12)
• HP Desktop Pro g3 Firmware: before f15 (fixed in f15)
• HP Desktop Pro g3 Microtower Firmware: before f15 (fixed in f15)
• HP Desktop Pro Microtower Firmware: before 00.02.40 (fixed in 00.02.40)
• HP RP2 Retail System 2000 Firmware: before 2.24 (fixed in 2.24)
• HP RP2 Retail System 2020 Firmware: before 2.24 (fixed in 2.24)
• HP RP2 Retail System 2030 Firmware: before 2.24 (fixed in 2.24)
• HP Zhan 66 Pro A g1 Microtower Firmware: before f.11 (fixed in f.11)
• HP Zhan 66 Pro A g1 R Microtower Firmware: before f12 (fixed in f12)
• HP Zhan 66 Pro g1 R Microtower Firmware: before f15 (fixed in f15)
• HP Zhan 86 Pro g1 Microtower Firmware: before 00.02.40 (fixed in 00.02.40)

Published 2023-02-12. Last modified 2026-06-17.