CVE Feed

    Dashboard / CVE / CVE-2017-2751

    CVE-2017-2751

    A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.

    Published:Oct 3, 2018
    Last Modified:Nov 21, 2024
    EPS:Oct 3, 2018
    EPSS Score:0.04384
    CVSS Score:4.6

    Affected Products

    Vendor
    Hp
    Product
    Compaq 14-h000
    Vendor
    Hp
    Product
    Compaq 14-h000 Firmware
    Vendor
    Hp
    Product
    Compaq 14-s000
    Vendor
    Hp
    Product
    Compaq 14-s000 Firmware
    Vendor
    Hp
    Product
    Compaq Cq45-900
    Vendor
    Hp
    Product
    Compaq Cq45-900 Firmware
    Vendor
    Hp
    Product
    Hp 1000-1300
    Vendor
    Hp
    Product
    Hp 1000-1300 Firmware
    Vendor
    Hp
    Product
    Hp 14-g000
    Vendor
    Hp
    Product
    Hp 14-g000 Firmware
    Vendor
    Hp
    Product
    Hp 14-r000
    Vendor
    Hp
    Product
    Hp 14-r000 Firmware
    Vendor
    Hp
    Product
    Hp 15-r000
    Vendor
    Hp
    Product
    Hp 15-r000 Firmware
    Vendor
    Hp
    Product
    Hp 15-r500
    Vendor
    Hp
    Product
    Hp 15-r500 Firmware
    Vendor
    Hp
    Product
    Hp 240 G1
    Vendor
    Hp
    Product
    Hp 240 G1 Firmware
    Vendor
    Hp
    Product
    Hp 240 G3
    Vendor
    Hp
    Product
    Hp 240 G3 Firmware
    Vendor
    Hp
    Product
    Hp 245 G1
    Vendor
    Hp
    Product
    Hp 245 G1 Firmware
    Vendor
    Hp
    Product
    Hp 246
    Vendor
    Hp
    Product
    Hp 246 Firmware
    Vendor
    Hp
    Product
    Hp 246 G3
    Vendor
    Hp
    Product
    Hp 246 G3 Firmware
    Vendor
    Hp
    Product
    Hp 250 G1 Notebook Pc
    Vendor
    Hp
    Product
    Hp 250 G1 Notebook Pc Firmware
    Vendor
    Hp
    Product
    Hp 255 G1 Notebook Pc
    Vendor
    Hp
    Product
    Hp 255 G1 Notebook Pc Firmware
    Vendor
    Hp
    Product
    Hp 255 G3
    Vendor
    Hp
    Product
    Hp 255 G3 Firmware
    Vendor
    Hp
    Product
    Hp 455
    Vendor
    Hp
    Product
    Hp 455 Firmware
    Vendor
    Hp
    Product
    Hp Envy 100
    Vendor
    Hp
    Product
    Hp Envy 100 Firmware
    Vendor
    Hp
    Product
    Hp Envy 14-k100
    Vendor
    Hp
    Product
    Hp Envy 14-k100 Firmware
    Vendor
    Hp
    Product
    Hp Envy 15-j000
    Vendor
    Hp
    Product
    Hp Envy 15-j000 Firmware
    Vendor
    Hp
    Product
    Hp Envy 15-j100
    Vendor
    Hp
    Product
    Hp Envy 15-j100 Firmware
    Vendor
    Hp
    Product
    Hp Envy 17-j100 Leap Motion Se
    Vendor
    Hp
    Product
    Hp Envy 17-j100 Leap Motion Se Firmware
    Vendor
    Hp
    Product
    Hp Envy 17 J100
    Vendor
    Hp
    Product
    Hp Envy 17 J100 Firmware
    Vendor
    Hp
    Product
    Hp Envy M6-n000
    Vendor
    Hp
    Product
    Hp Envy M6-n000 Firmware
    Vendor
    Hp
    Product
    Hp G14-a000
    Vendor
    Hp
    Product
    Hp G14-a000 Firmware
    Vendor
    Hp
    Product
    Hp Pavilion 10-f000
    Vendor
    Hp
    Product
    Hp Pavilion 10-f000 Firmware
    Vendor
    Hp
    Product
    Hp Pavilion 11-n000
    Vendor
    Hp
    Product
    Hp Pavilion 11-n000 Firmware
    Vendor
    Hp
    Product
    Hp Pavilion 14-n000
    Vendor
    Hp
    Product
    Hp Pavilion 14-n000 Firmware
    Vendor
    Hp
    Product
    Hp Pavilion 15-n000
    Vendor
    Hp
    Product
    Hp Pavilion 15-n000 Firmware
    Vendor
    Hp
    Product
    Hp Pavilion 15-n200
    Vendor
    Hp
    Product
    Hp Pavilion 15-n200 Firmware
    Vendor
    Hp
    Product
    Hp Pavilion 15-n300
    Vendor
    Hp
    Product
    Hp Pavilion 15-n300 Firmware
    Vendor
    Hp
    Product
    Hp Spectre 13-h200
    Vendor
    Hp
    Product
    Hp Spectre 13-h200 Firmware
    Vendor
    Hp
    Product
    Hp Spectre X2 13-smb Pro
    Vendor
    Hp
    Product
    Hp Spectre X2 13-smb Pro Firmware
    Vendor
    Hp
    Product
    Hp Split 13-g200
    Vendor
    Hp
    Product
    Hp Split 13-g200 Firmware

    Exploits

    https://github.com/BaderSZ/CVE-2017-2751

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High