HP Zhan 66 Pro A g1 R Microtower Firmware vulnerabilities

2 CVEs affecting HP Zhan 66 Pro A g1 R Microtower Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26300, published 2023-10-18.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-26300, published 2023-10-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the…
• CVE-2022-43779, published 2023-02-12. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code execution, denial…