HP Desktop Pro g3 Microtower Firmware vulnerabilities

2 CVEs affecting HP Desktop Pro g3 Microtower Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43779, published 2023-02-12.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3439, published 2023-02-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.
• CVE-2022-43779, published 2023-02-12. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code execution, denial…