CVE Feed

    Dashboard / CVE / CVE-2022-43779

    CVE-2022-43779

    A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code execution, denial of service, and information disclosure. AMI has released updates to mitigate the potential vulnerability.

    Published:Feb 3, 2023
    Last Modified:Mar 25, 2025
    EPS:Feb 3, 2023
    EPSS Score:0.00144
    CVSS Score:7

    Affected Products

    Vendor
    Hp
    Product
    218 Pro G5 Mt
    Vendor
    Hp
    Product
    218 Pro G5 Mt Firmware
    Vendor
    Hp
    Product
    260 G2 Desktop Mini
    Vendor
    Hp
    Product
    260 G2 Desktop Mini Firmware
    Vendor
    Hp
    Product
    260 G3 Desktop Mini
    Vendor
    Hp
    Product
    260 G3 Desktop Mini Firmware
    Vendor
    Hp
    Product
    260 G4 Desktop Mini
    Vendor
    Hp
    Product
    260 G4 Desktop Mini Firmware
    Vendor
    Hp
    Product
    280 G3 Microtower Pc
    Vendor
    Hp
    Product
    280 G3 Microtower Pc Firmware
    Vendor
    Hp
    Product
    280 G3 Pci Microtower Pc
    Vendor
    Hp
    Product
    280 G3 Pci Microtower Pc Firmware
    Vendor
    Hp
    Product
    288 Pro G3 Microtower Pc
    Vendor
    Hp
    Product
    288 Pro G3 Microtower Pc Firmware
    Vendor
    Hp
    Product
    290 G1 Microtower
    Vendor
    Hp
    Product
    290 G1 Microtower Firmware
    Vendor
    Hp
    Product
    348 G4
    Vendor
    Hp
    Product
    348 G4 Firmware
    Vendor
    Hp
    Product
    Desktop Pro 300 G3
    Vendor
    Hp
    Product
    Desktop Pro 300 G3 Firmware
    Vendor
    Hp
    Product
    Desktop Pro A 300 G3
    Vendor
    Hp
    Product
    Desktop Pro A 300 G3 Firmware
    Vendor
    Hp
    Product
    Desktop Pro A G2
    Vendor
    Hp
    Product
    Desktop Pro A G2 Firmware
    Vendor
    Hp
    Product
    Desktop Pro A G2 Microtower
    Vendor
    Hp
    Product
    Desktop Pro A G2 Microtower Firmware
    Vendor
    Hp
    Product
    Desktop Pro A G3
    Vendor
    Hp
    Product
    Desktop Pro A G3 Firmware
    Vendor
    Hp
    Product
    Desktop Pro A G3 Microtower
    Vendor
    Hp
    Product
    Desktop Pro A G3 Microtower Firmware
    Vendor
    Hp
    Product
    Desktop Pro G3
    Vendor
    Hp
    Product
    Desktop Pro G3 Firmware
    Vendor
    Hp
    Product
    Desktop Pro G3 Microtower
    Vendor
    Hp
    Product
    Desktop Pro G3 Microtower Firmware
    Vendor
    Hp
    Product
    Desktop Pro Microtower
    Vendor
    Hp
    Product
    Desktop Pro Microtower Firmware
    Vendor
    Hp
    Product
    Rp2 Retail System 2000
    Vendor
    Hp
    Product
    Rp2 Retail System 2000 Firmware
    Vendor
    Hp
    Product
    Rp2 Retail System 2020
    Vendor
    Hp
    Product
    Rp2 Retail System 2020 Firmware
    Vendor
    Hp
    Product
    Rp2 Retail System 2030
    Vendor
    Hp
    Product
    Rp2 Retail System 2030 Firmware
    Vendor
    Hp
    Product
    Zhan 66 Pro A G1 Microtower
    Vendor
    Hp
    Product
    Zhan 66 Pro A G1 Microtower Firmware
    Vendor
    Hp
    Product
    Zhan 66 Pro A G1 R Microtower
    Vendor
    Hp
    Product
    Zhan 66 Pro A G1 R Microtower Firmware
    Vendor
    Hp
    Product
    Zhan 66 Pro G1 R Microtower
    Vendor
    Hp
    Product
    Zhan 66 Pro G1 R Microtower Firmware
    Vendor
    Hp
    Product
    Zhan 86 Pro G1 Microtower
    Vendor
    Hp
    Product
    Zhan 86 Pro G1 Microtower Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High