HP z640 Workstation Firmware vulnerabilities

11 CVEs affecting HP z640 Workstation Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-6138, published 2024-02-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-43778, published 2023-06-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and…
CVE-2023-6138, published 2024-02-14. High severity, CVSS 7.9. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP…
CVE-2021-3439, published 2023-02-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.
CVE-2022-31639, published 2023-06-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege,…
CVE-2022-31638, published 2023-06-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege,…
CVE-2022-31637, published 2023-06-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege,…
CVE-2022-31636, published 2023-06-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege,…
CVE-2022-31635, published 2023-06-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege,…
CVE-2022-43777, published 2023-06-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and…
CVE-2022-27541, published 2023-06-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and…

Latest

CVE-2022-27539, published 2023-06-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and…