VULNERABILITY INTELLIGENCE
CVE-2024-5477
CVSS score7.3 HIGH
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-08-13
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasing firmware mitigation for the potential vulnerability.
Weakness classification
- CWE-1256: Improper Restriction of Software Interfaces to Hardware Features