CVE-2016-2243

HIGH

HP 700 Series Firmware - Improper Access Control

Title source: rule
STIX 2.1

Description

Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_hp
https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05012469
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1035193

Scores

CVSS v3 7.9
EPSS 0.0004
EPSS Percentile 13.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Details

CWE
CWE-284
Status published
Products (15)
hp/1000_series_firmware 1.04
hp/1000_series_firmware 1.1
hp/1000_series_firmware 1.01
hp/700_series_firmware 1.08
hp/700_series_firmware 2.09
hp/700_series_firmware 2.05
hp/700_series_firmware 1.05
hp/700_series_firmware 2.07
hp/800_series_firmware 2.09
hp/800_series_firmware 2.1
... and 5 more
Published Mar 04, 2016
Tracked Since Feb 18, 2026