CVE-2017-2751
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others.
Does this matter?
Lower severity and a low EPSS score (1.07%). Track it; it rarely justifies an emergency change on its own.
Description
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.
- CVSS 3.0
- 4.6 MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.07% probability · 65th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-522
- Affected
- hp/hp 240 g1 firmware · hp/hp 245 g1 firmware · hp/hp 1000-1300 firmware · hp/hp 250 g1 notebook pc firmware · hp/hp 255 g1 notebook pc firmware · hp/hp envy 15-j000 firmware · hp/hp envy 15-j100 firmware · hp/hp pavilion 15-n000 firmware · hp/hp 246 firmware · hp/hp 455 firmware · hp/hp envy 17 j100 firmware · hp/hp envy 17-j100 leap motion se firmware · hp/hp split 13-g200 firmware · hp/hp envy 100 firmware · hp/hp pavilion 14-n000 firmware · hp/hp envy 14-k100 firmware · hp/hp spectre x2 13-smb pro firmware · hp/hp spectre 13-h200 firmware · hp/hp pavilion 15-n200 firmware · hp/hp pavilion 15-n300 firmware · +14 more
- Source
- hp-security-alert@hp.com
EPSS 1.1% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://support.hp.com/us-en/document/c05913581Vendor Advisory
- https://support.hp.com/us-en/document/c05913581Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.