by Kastro
Paper/Archive/CVE-2024-4143

CVE-2024-4143

HP Inc. Certain HP PC Products — Certain HP PC products using AMI BIOS – Buffer Overflow

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 47.5.475 × 209.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbitrary code execution. AMI has released firmware updates to mitigate this vulnerability.

Affected

ProductAffectedFixed inSource
Certain HP PC ProductsSee HP security bulletin reference for affected versions–CNA
ami_biossee advisory–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.hp.com/us-en/document/ish_10914391-10914417-16/hpsbhf03953