Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service…
Priority LOW 35CWE-284Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-284.
Summary
Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access.
Why it matters now
EPSS 0.00419 36th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 38
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:hp:elitebook_725_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitebook_745_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitebook_755_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:700_series_firmware:1.08:*:*:*:*:*:*:* | 1.08 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedesk_800_g2_twr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedesk_800_sff:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:800_series_firmware:2.09:*:*:*:*:*:*:* | 2.09 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z240_sff_workstation_n51:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z240_tower_workstation_n51:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z240_firmware:1.11:*:*:*:*:*:*:* | 1.11 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:h:hp:elitebook_725_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitebook_745_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitebook_755_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:700_series_firmware:1.08:*:*:*:*:*:*:* Versions 1.08 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedesk_800_g2_twr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedesk_800_sff:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:800_series_firmware:2.09:*:*:*:*:*:*:* Versions 2.09 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z240_sff_workstation_n51:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z240_tower_workstation_n51:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z240_firmware:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Hewlett Packard Enterprise
Show 28 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hp:700_series_firmware:2.09:*:*:*:*:*:*:* | 2.09 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedesk_705_g2_mt_sff:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:z238_microtower_workstation_n51:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:z238_firmware:1.11:*:*:*:*:*:*:* | 1.11 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:zbook_firmware:1.03:*:*:*:*:*:*:* | 1.03 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedesk_800_g2_dm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:* | t-ms14jakucb-1102.5 | Running on | Samsung |
| cpe:2.3:o:hp:800_series_firmware:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:1000_series_firmware:1.04:*:*:*:*:*:*:* | 1.04 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitebook_folio_1012_x2_g2:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:1000_series_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitebook_folio_1040_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:1000_series_firmware:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:elitedesk_705_g2_dm:*:*:*:*:*:*:*:* | all versions | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:700_series_firmware:2.05:*:*:*:*:*:*:* | 2.05 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:mt42_mobile_thin_client:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:700_series_firmware:1.05:*:*:*:*:*:*:* | 1.05 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:zbook_firmware:1.04:*:*:*:*:*:*:* | 1.04 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:* | before 2.50\(aazi.0\)c0 | Running on | Zyxel |
| cpe:2.3:o:hp:700_series_firmware:2.07:*:*:*:*:*:*:* | 2.07 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:o:hp:700_series_firmware:2.09:*:*:*:*:*:*:* Versions 2.09 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedesk_705_g2_mt_sff:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:z238_microtower_workstation_n51:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:z238_firmware:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:zbook_firmware:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedesk_800_g2_dm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:* Versions t-ms14jakucb-1102.5 Running on ·Samsung
- cpe:2.3:o:hp:800_series_firmware:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:1000_series_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitebook_folio_1012_x2_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:1000_series_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitebook_folio_1040_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:1000_series_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:elitedesk_705_g2_dm:*:*:*:*:*:*:*:* Versions all versions Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:700_series_firmware:2.05:*:*:*:*:*:*:* Versions 2.05 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:mt42_mobile_thin_client:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:700_series_firmware:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:zbook_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:* Versions before 2.50\(aazi.0\)c0 Running on ·Zyxel
- cpe:2.3:o:hp:700_series_firmware:2.07:*:*:*:*:*:*:* Versions 2.07 Vulnerable ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-2243
- 2026-10-03 Alias added: GHSA-h8g3-63cv-v336
References
Advisory 1
Sources
- CVE-2016-2243 · CVE Program
- CVE-2016-2243 · NVD
- FIRST EPSS
- GHSA-h8g3-63cv-v336 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences