cvelistv5 - cve-2023-5410

cve-2023-5410

Vulnerability from cvelistv5

Published

2024-03-12 20:01

Modified

2024-11-12 20:34

Severity ?

8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.

References

▼	URL	Tags
	hp-security-alert@hp.com	https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924
	af854a3a-2127-422b-91ae-364da2661108	https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924

Impacted products

	Vendor	Product	Version
	HP Inc.	HP PC BIOS	Version: See HP Security Bulletin reference for affected versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:hp_inc:business_notebook_pcs:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "business_notebook_pcs",
            "vendor": "hp_inc",
            "versions": [
              {
                "lessThanOrEqual": "1.15.01",
                "status": "affected",
                "version": "1.03.01",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:hp_inc:business_desktop_pcs:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "business_desktop_pcs",
            "vendor": "hp_inc",
            "versions": [
              {
                "lessThanOrEqual": "2.12.03",
                "status": "affected",
                "version": "2.12.02",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:hp_inc:workstations:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "workstations",
            "vendor": "hp_inc",
            "versions": [
              {
                "status": "affected",
                "version": "2.04.02"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:hp_inc:thin_client:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thin_client",
            "vendor": "hp_inc",
            "versions": [
              {
                "lessThanOrEqual": "1.15.01",
                "status": "affected",
                "version": "1.09.01",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-5410",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-23T14:04:36.871281Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-203",
                "description": "CWE-203 Observable Discrepancy",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T20:34:15.291Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:59:44.777Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "HP PC BIOS",
          "vendor": "HP Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP Security Bulletin reference for affected versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-12T20:01:46.531Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.15"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2023-5410",
    "datePublished": "2024-03-12T20:01:46.531Z",
    "dateReserved": "2023-10-04T18:22:43.127Z",
    "dateUpdated": "2024-11-12T20:34:15.291Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-5410\",\"sourceIdentifier\":\"hp-security-alert@hp.com\",\"published\":\"2024-03-12T20:15:07.550\",\"lastModified\":\"2024-11-21T08:41:43.063\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.\"},{\"lang\":\"es\",\"value\":\"Se ha informado de una posible vulnerabilidad de seguridad en el BIOS del sistema de ciertos productos de PC HP, que podr\u00eda permitir la manipulaci\u00f3n de la memoria. HP est\u00e1 lanzando medidas de mitigaci\u00f3n para la posible vulnerabilidad.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":6.0}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-203\"}]}],\"references\":[{\"url\":\"https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T07:59:44.777Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.2, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-5410\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-23T14:04:36.871281Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:o:hp_inc:business_notebook_pcs:*:*:*:*:*:*:*:*\"], \"vendor\": \"hp_inc\", \"product\": \"business_notebook_pcs\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.03.01\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.15.01\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:o:hp_inc:business_desktop_pcs:*:*:*:*:*:*:*:*\"], \"vendor\": \"hp_inc\", \"product\": \"business_desktop_pcs\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.12.02\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.12.03\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:o:hp_inc:workstations:*:*:*:*:*:*:*:*\"], \"vendor\": \"hp_inc\", \"product\": \"workstations\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.04.02\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:o:hp_inc:thin_client:*:*:*:*:*:*:*:*\"], \"vendor\": \"hp_inc\", \"product\": \"thin_client\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.09.01\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.15.01\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-203\", \"description\": \"CWE-203 Observable Discrepancy\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-23T14:05:09.605Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"HP Inc.\", \"product\": \"HP PC BIOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"See HP Security Bulletin reference for affected versions\"}], \"defaultStatus\": \"unknown\"}], \"references\": [{\"url\": \"https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924\"}], \"x_generator\": {\"engine\": \"cveClient/1.0.15\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.\"}], \"providerMetadata\": {\"orgId\": \"74586083-13ce-40fd-b46a-8e5d23cfbcb2\", \"shortName\": \"hp\", \"dateUpdated\": \"2024-03-12T20:01:46.531Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-5410\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-11-12T20:34:15.291Z\", \"dateReserved\": \"2023-10-04T18:22:43.127Z\", \"assignerOrgId\": \"74586083-13ce-40fd-b46a-8e5d23cfbcb2\", \"datePublished\": \"2024-03-12T20:01:46.531Z\", \"assignerShortName\": \"hp\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

WID-SEC-W-2024-0599

Vulnerability from csaf_certbund

Published

2024-03-12 23:00

Modified

2024-03-12 23:00

Summary

HP BIOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Angriff

Ein anonymer Angreifer mit physischem Zugriff kann eine Schwachstelle im HP BIOS ausnutzen, um die Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme

- BIOS/Firmware

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein anonymer Angreifer mit physischem Zugriff kann eine Schwachstelle im HP BIOS ausnutzen, um die Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0599 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0599.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0599 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0599"
      },
      {
        "category": "external",
        "summary": "HP Security Advisory vom 2024-03-12",
        "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/HPSBHF03924"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2024-03-12",
        "url": "https://github.com/advisories/GHSA-q7gc-j674-5xp7"
      }
    ],
    "source_lang": "en-US",
    "title": "HP BIOS: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
    "tracking": {
      "current_release_date": "2024-03-12T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:06:19.698+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0599",
      "initial_release_date": "2024-03-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-03-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HP BIOS",
            "product": {
              "name": "HP BIOS",
              "product_id": "T033440",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:bios:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HP"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-5410",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle im HP BIOS. Dieser Fehler besteht aufgrund eines Fehlers im Speichermanagement. Durch \u00c4nderung der BIOS-Einstellungen \"Pre-boot DMA Protections\" kann ein anonymer Angreifer mit physischem Zugriff diese Schwachstelle ausnutzen, um die Sicherheitsfunktion Microsoft Windows Kernel DMA Protection zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033440"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2023-5410"
    }
  ]
}

wid-sec-w-2024-0599

Vulnerability from csaf_certbund

Published

2024-03-12 23:00

Modified

2024-03-12 23:00

Summary

HP BIOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Notes

Produktbeschreibung

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Angriff

Ein anonymer Angreifer mit physischem Zugriff kann eine Schwachstelle im HP BIOS ausnutzen, um die Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme

- BIOS/Firmware

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein anonymer Angreifer mit physischem Zugriff kann eine Schwachstelle im HP BIOS ausnutzen, um die Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0599 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0599.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0599 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0599"
      },
      {
        "category": "external",
        "summary": "HP Security Advisory vom 2024-03-12",
        "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/HPSBHF03924"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2024-03-12",
        "url": "https://github.com/advisories/GHSA-q7gc-j674-5xp7"
      }
    ],
    "source_lang": "en-US",
    "title": "HP BIOS: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
    "tracking": {
      "current_release_date": "2024-03-12T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:06:19.698+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0599",
      "initial_release_date": "2024-03-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-03-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HP BIOS",
            "product": {
              "name": "HP BIOS",
              "product_id": "T033440",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:bios:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HP"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-5410",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle im HP BIOS. Dieser Fehler besteht aufgrund eines Fehlers im Speichermanagement. Durch \u00c4nderung der BIOS-Einstellungen \"Pre-boot DMA Protections\" kann ein anonymer Angreifer mit physischem Zugriff diese Schwachstelle ausnutzen, um die Sicherheitsfunktion Microsoft Windows Kernel DMA Protection zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033440"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2023-5410"
    }
  ]
}

ghsa-q7gc-j674-5xp7

Vulnerability from github

Published

2024-03-12 21:30

Modified

2024-11-13 00:30

Severity ?

8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-5410"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-203"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-12T20:15:07Z",
    "severity": "HIGH"
  },
  "details": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.",
  "id": "GHSA-q7gc-j674-5xp7",
  "modified": "2024-11-13T00:30:47Z",
  "published": "2024-03-12T21:30:59Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5410"
    },
    {
      "type": "WEB",
      "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

fkie_cve-2023-5410

Vulnerability from fkie_nvd

Published

2024-03-12 20:15

Modified

2024-11-21 08:41

Severity ?

8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.

References

▼	URL	Tags
	hp-security-alert@hp.com	https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924
	af854a3a-2127-422b-91ae-364da2661108	https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability."
    },
    {
      "lang": "es",
      "value": "Se ha informado de una posible vulnerabilidad de seguridad en el BIOS del sistema de ciertos productos de PC HP, que podr\u00eda permitir la manipulaci\u00f3n de la memoria. HP est\u00e1 lanzando medidas de mitigaci\u00f3n para la posible vulnerabilidad."
    }
  ],
  "id": "CVE-2023-5410",
  "lastModified": "2024-11-21T08:41:43.063",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-03-12T20:15:07.550",
  "references": [
    {
      "source": "hp-security-alert@hp.com",
      "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-203"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

gsd-2023-5410

Vulnerability from gsd

Modified

2023-12-13 01:20

Details

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.

Aliases

CVE-2023-5410

Aliases

CVE-2023-5410

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-5410",
    "id": "GSD-2023-5410"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-5410"
      ],
      "details": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability.",
      "id": "GSD-2023-5410",
      "modified": "2023-12-13T01:20:51.057262Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "hp-security-alert@hp.com",
        "ID": "CVE-2023-5410",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "HP PC BIOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "See HP Security Bulletin reference for affected versions"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "HP Inc."
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability."
          }
        ]
      },
      "generator": {
        "engine": "cveClient/1.0.15"
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924",
            "refsource": "MISC",
            "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability."
          },
          {
            "lang": "es",
            "value": "Se ha informado de una posible vulnerabilidad de seguridad en el BIOS del sistema de ciertos productos de PC HP, que podr\u00eda permitir la manipulaci\u00f3n de la memoria. HP est\u00e1 lanzando medidas de mitigaci\u00f3n para la posible vulnerabilidad."
          }
        ],
        "id": "CVE-2023-5410",
        "lastModified": "2024-03-13T12:33:51.697",
        "metrics": {},
        "published": "2024-03-12T20:15:07.550",
        "references": [
          {
            "source": "hp-security-alert@hp.com",
            "url": "https://support.hp.com/us-en/document/ish_10290255-10290279-16/hpsbhf03924"
          }
        ],
        "sourceIdentifier": "hp-security-alert@hp.com",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cve-2023-5410

Vulnerability from cvelistv5

WID-SEC-W-2024-0599

Vulnerability from csaf_certbund

wid-sec-w-2024-0599

Vulnerability from csaf_certbund

ghsa-q7gc-j674-5xp7

Vulnerability from github

fkie_cve-2023-5410

Vulnerability from fkie_nvd

gsd-2023-5410

Vulnerability from gsd

Tags

Sightings

Nomenclature