TI-2023-11459 Aliases CVE-2023-26299 GHSA-hwjr-m4gg-39hg

Time-of-check time-of-use race condition in Hewlett Packard Enterprise HP PC products…

LOW 32CWE-367Published 2023-06-30 · Updated 2024-12-04

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00128 2nd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise	HP PC products using AMI UEFI Firmware	See HP Security Bulletin reference for affected versions.	—	No fix listed	CNA

HP PC products using AMI UEFI Firmware VendorHewlett Packard Enterprise Affected See HP Security Bulletin reference for affected versions. Fixed in — No fix listed CNA

CPE configurations NVD · 118

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:260_g4_desktop_mini_firmware::::::::	before 2.14	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:260_g4_desktop_mini:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:t430_firmware::::::::	before 00.01.11	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:t430:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:t628_firmware::::::::	before 00.01.10	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:t628:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:240_g10_firmware::::::::	before f.04	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:240_g10:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:245_g6_firmware::::::::	before f.35	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:245_g6:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:260_g4_desktop_mini_firmware:*:*:*:*:*:*:*:* Versions before 2.14 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:260_g4_desktop_mini:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:t430_firmware:*:*:*:*:*:*:*:* Versions before 00.01.11 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:t430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:t628_firmware:*:*:*:*:*:*:*:* Versions before 00.01.10 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:t628:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:240_g10_firmware:*:*:*:*:*:*:*:* Versions before f.04 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:240_g10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:245_g6_firmware:*:*:*:*:*:*:*:* Versions before f.35 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:245_g6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Show 108 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:245_g7_firmware::::::::	before f.69	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:245_g7:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:245_g8_firmware::::::::	before f.25	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:245_g8:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:247_g8_firmware::::::::	before f.69	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:247_g8:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:250_g10_firmware::::::::	before f.05	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:250_g10:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:255_g10_firmware::::::::	before f.08	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:255_g10:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:349_g7_firmware::::::::	before f.28	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:349_g7:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:470_g10_firmware::::::::	before f.02	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:470_g10:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:470_g9_firmware::::::::	before f.05	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:470_g9:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_99_g2_firmware::::::::	before f.24	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_99_g2:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_99_g4_firmware::::::::	before f.08	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_99_g4:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:vr_backpack_g2_firmware::::::::	before f.28	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:vr_backpack_g2:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:200_g3_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:200_g3:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:200_g4_22_all-in-one_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:200_g4_22_all-in-one:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:200_pro_g4_22_all-in-one_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:200_pro_g4_22_all-in-one:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:205_g4_22_all-in-one_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:205_g4_22_all-in-one:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:205_pro_g4_22_all-in-one_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:205_pro_g4_22_all-in-one:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g3_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g3:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g4_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g4:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g4_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g4_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g5_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g5:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g5_small_form_factor_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g5_small_form_factor:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g6_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g6:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g8_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g8_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_pro_g3_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_pro_g3:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_pro_g4_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_pro_g4_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:280_pro_g5_small_form_factor_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:280_pro_g5_small_form_factor:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:282_g5_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:282_g5:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:282_g6_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:282_g6:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:282_pro_g4_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:282_pro_g4_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:288_g5_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:288_g5:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:288_g6_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:288_g6:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:288_pro_g4_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:288_pro_g4_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g1_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g1:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g2_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g2:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g2_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g2_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g3_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g3:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g3_small_form_factor_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g3_small_form_factor:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g4_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g4:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:desktop_pro_g1_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:desktop_pro_g1_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_small_form_factor_280_g9_desktop_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_small_form_factor_280_g9_desktop:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_small_form_factor_290_g9_desktop_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_small_form_factor_290_g9_desktop:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_small_form_factor_zhan_66_g9_desktop_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_small_form_factor_zhan_66_g9_desktop:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_200_g9_desktop_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_200_g9_desktop:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_280_g9_desktop_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_280_g9_desktop:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_290_g9_desktop_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_290_g9_desktop:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_zhan_99_g9_desktop_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_zhan_99_g9_desktop:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_240_g10_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_240_g10:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_240_g9_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_240_g9:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_440_g3_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_440_g3:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_490_g3_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_490_g3:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_496_g3_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_496_g3:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z_vr_backpack_g1_workstation_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z_vr_backpack_g1_workstation:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_86_pro_g2_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_86_pro_g2_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_99_pro_g1_microtower_firmware:-:::::::*	not specified by NVD	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_99_pro_g1_microtower:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:245_g7_firmware:*:*:*:*:*:*:*:* Versions before f.69 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:245_g7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:245_g8_firmware:*:*:*:*:*:*:*:* Versions before f.25 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:245_g8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:247_g8_firmware:*:*:*:*:*:*:*:* Versions before f.69 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:247_g8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:250_g10_firmware:*:*:*:*:*:*:*:* Versions before f.05 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:250_g10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:255_g10_firmware:*:*:*:*:*:*:*:* Versions before f.08 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:255_g10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:349_g7_firmware:*:*:*:*:*:*:*:* Versions before f.28 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:349_g7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:470_g10_firmware:*:*:*:*:*:*:*:* Versions before f.02 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:470_g10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:470_g9_firmware:*:*:*:*:*:*:*:* Versions before f.05 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:470_g9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_99_g2_firmware:*:*:*:*:*:*:*:* Versions before f.24 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_99_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_99_g4_firmware:*:*:*:*:*:*:*:* Versions before f.08 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_99_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:vr_backpack_g2_firmware:*:*:*:*:*:*:*:* Versions before f.28 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:vr_backpack_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:200_g3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:200_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:200_g4_22_all-in-one_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:200_g4_22_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:200_pro_g4_22_all-in-one_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:200_pro_g4_22_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:205_g4_22_all-in-one_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:205_g4_22_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:205_pro_g4_22_all-in-one_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:205_pro_g4_22_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g4_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g4_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g4_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g5_small_form_factor_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g5_small_form_factor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g6_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_g8_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_g8_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_pro_g3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_pro_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_pro_g4_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_pro_g4_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:280_pro_g5_small_form_factor_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:280_pro_g5_small_form_factor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:282_g5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:282_g5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:282_g6_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:282_g6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:282_pro_g4_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:282_pro_g4_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:288_g5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:288_g5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:288_g6_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:288_g6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:288_pro_g4_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:288_pro_g4_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g2_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g2_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g3_small_form_factor_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g3_small_form_factor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:290_g4_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:290_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:desktop_pro_g1_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:desktop_pro_g1_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_small_form_factor_280_g9_desktop_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_small_form_factor_280_g9_desktop:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_small_form_factor_290_g9_desktop_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_small_form_factor_290_g9_desktop:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_small_form_factor_zhan_66_g9_desktop_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_small_form_factor_zhan_66_g9_desktop:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_200_g9_desktop_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_200_g9_desktop:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_280_g9_desktop_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_280_g9_desktop:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_290_g9_desktop_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_290_g9_desktop:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:pro_tower_zhan_99_g9_desktop_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:pro_tower_zhan_99_g9_desktop:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_240_g10_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_240_g10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_240_g9_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_240_g9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_440_g3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_440_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_490_g3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_490_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:proone_496_g3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proone_496_g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z_vr_backpack_g1_workstation_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z_vr_backpack_g1_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_86_pro_g2_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_86_pro_g2_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:zhan_99_pro_g1_microtower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:zhan_99_pro_g1_microtower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-26299
2026-10-03 Alias added: GHSA-hwjr-m4gg-39hg

References

Patch 1

https://support.hp.com/us-en/document/ish_8642715-8642746-16/hpsbhf03850

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences