{"id":"CVE-2023-6138","state":"PUBLISHED","title":"A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or de","description":"A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability.","publishedAt":"2024-02-14T22:12:16.966Z","updatedAt":"2024-11-21T21:37:16.403Z","severity":{"score":7.9,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","source":"CISA-ADP"},"assigner":"hp","products":["HP Inc. Certain HP Workstation PCs"],"affected":[{"vendor":"HP Inc.","product":"Certain HP Workstation PCs","defaultStatus":"unknown","versions":[{"version":"See HP Security Bulletin reference for affected versions.","status":"affected"}]}],"references":["https://support.hp.com/us-en/document/ish_10167884-10167908-16/hpsbhf03915"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/6xxx/CVE-2023-6138.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-6138","state":"PUBLISHED","datePublished":"2024-02-14T22:12:16.966Z","dateUpdated":"2024-11-21T21:37:16.403Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2023-11-14T22:47:24.126Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability."}],"affected":[{"vendor":"HP Inc.","product":"Certain HP Workstation PCs","defaultStatus":"unknown","versions":[{"version":"See HP Security Bulletin reference for affected versions.","status":"affected"}]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_10167884-10167908-16/hpsbhf03915"}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2024-02-14T22:12:16.966Z"},"x_generator":{"engine":"cveClient/1.0.15"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.hp.com/us-en/document/ish_10167884-10167908-16/hpsbhf03915","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:21:17.709Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.9,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-08-28T13:57:07.063493Z","id":"CVE-2023-6138","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"type":"CWE","lang":"en","description":"CWE-noinfo Not enough information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-21T21:37:16.403Z"}}]}}}