CVE-2022-23925

HighCVSS 8.2/10Last modified Oct 8, 2026

Description

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2022
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-239268.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239278.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239288.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239298.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-23935.7A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication isCVE-2022-239308.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239318.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239328.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239338.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239348.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239357.8lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.CVE-2022-239377.5In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario.