CVE-2023-26300

Q: What is the severity of CVE-2023-26300?

CVE-2023-26300 has a CVSS score of 7.8 (HIGH). This CVE describes a BIOS vulnerability in certain HP PC products that could allow attackers to escalate privileges on affected systems. The vulnerability affects specific HP PC models and requires physical or administrative access to exploit. HP has released firmware updates to address this security issue.

7.8 HIGH

📋 TL;DR

This CVE describes a BIOS vulnerability in certain HP PC products that could allow attackers to escalate privileges on affected systems. The vulnerability affects specific HP PC models and requires physical or administrative access to exploit. HP has released firmware updates to address this security issue.

💻 Affected Systems

Products:

Certain HP PC products (specific models not detailed in provided references)

Versions: Specific BIOS versions not detailed in provided references

Operating Systems: All operating systems running on affected hardware

Default Config Vulnerable: ⚠️ Yes

Notes: Affects specific HP PC models; users should check HP's advisory for exact model and BIOS version details.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

An attacker with physical or administrative access could gain SYSTEM/root-level privileges, bypass security controls, install persistent malware, or access sensitive data.

🟠

Likely Case

Malicious insiders or attackers with physical access could gain elevated privileges on affected HP systems to install unauthorized software or access restricted data.

🟢

If Mitigated

With proper physical security controls and BIOS password protection, the attack surface is significantly reduced, though the vulnerability remains present.

🌐 Internet-Facing: LOW - This vulnerability requires physical or administrative access to the system and cannot be exploited remotely over the internet.

🏢 Internal Only: MEDIUM - Internal attackers with physical access or administrative privileges could exploit this vulnerability to escalate privileges on affected HP systems.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires physical access or administrative privileges to the system. No public exploit code is known at this time.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Latest firmware updates from HP

Vendor Advisory: https://support.hp.com/us-en/document/ish_9461800-9461828-16

Restart Required: Yes

Instructions:

1. Visit HP Support website. 2. Enter your HP PC model number. 3. Download latest BIOS/firmware update. 4. Run the update utility. 5. Restart system when prompted.

🔧 Temporary Workarounds

Enable BIOS Password

all

Set a BIOS administrator password to prevent unauthorized BIOS modifications

Access BIOS setup during boot (typically F10) and set administrator password

Physical Security Controls

all

Implement physical security measures to prevent unauthorized access to systems

🧯 If You Can't Patch

Implement strict physical security controls to prevent unauthorized access to affected systems
Enable BIOS passwords and secure boot options to reduce attack surface

🔍 How to Verify

Check if Vulnerable:

Check HP Support website with your PC model number to see if affected, or check current BIOS version against HP's advisory

Check Version:

Windows: wmic bios get smbiosbiosversion | Linux: sudo dmidecode -s bios-version

Verify Fix Applied:

Verify BIOS version after update matches or exceeds the patched version listed in HP's advisory

📡 Detection & Monitoring

Log Indicators:

Unexpected BIOS modifications
Failed BIOS update attempts
System boot anomalies

Network Indicators:

No network indicators - this is a local privilege escalation vulnerability

SIEM Query:

Search for BIOS modification events or unexpected privilege escalation on HP systems

📊 Metadata

CVE ID: CVE-2023-26300

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Published: October 18, 2023

Last Updated: November 21, 2024

🔗 References

https://support.hp.com/us-en/document/ish_9461800-9461828-16 Patch,Vendor Advisory
https://support.hp.com/us-en/document/ish_9461800-9461828-16 Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

200 G4 22 All In One Pc \(rom Family Ssid 86f0\) Firmware by Hp

200 G4 22 All In One Pc \(rom Family Ssid 86f2\) Firmware by Hp

200 G4 22 All In One Pc \(rom Family Ssid 86f3\) Firmware by Hp

200 Pro G4 22 All In One Pc \(rom Family Ssid 86f0\) Firmware by Hp

200 Pro G4 22 All In One Pc \(rom Family Ssid 86f2\) Firmware by Hp

200 Pro G4 22 All In One Pc \(rom Family Ssid 86f3\) Firmware by Hp

205 G4 22 All In One Pc \(rom Family Ssid 86f0\) Firmware by Hp

205 G4 22 All In One Pc \(rom Family Ssid 86f2\) Firmware by Hp

205 G4 22 All In One Pc \(rom Family Ssid 86f3\) Firmware by Hp

205 G8 24 All In One Pc \(rom Family Ssid 8923\) Firmware by Hp

205 G8 24 All In One Pc \(rom Family Ssid 8924\) Firmware by Hp

205 Pro G4 22 All In One Pc \(rom Family Ssid 86f0\) Firmware by Hp

205 Pro G4 22 All In One Pc \(rom Family Ssid 86f2\) Firmware by Hp

205 Pro G4 22 All In One Pc \(rom Family Ssid 86f3\) Firmware by Hp

205 Pro G8 24 All In One Pc \(rom Family Ssid 8923\) Firmware by Hp

205 Pro G8 24 All In One Pc \(rom Family Ssid 8924\) Firmware by Hp

240 G10 Firmware by Hp

240 G6 Firmware by Hp

240 G7 Firmware by Hp

240 G9 Firmware by Hp

245 Firmware by Hp

245 G10 Firmware by Hp

245 G7 Firmware by Hp

245 G8 Firmware by Hp

245 G9 Firmware by Hp

246 G6 Firmware by Hp

246 G7 Firmware by Hp

247 G8 Firmware by Hp

250 G10 Firmware by Hp

250 G6 Firmware by Hp

250 G7 Firmware by Hp

250 G9 Firmware by Hp

255 G10 Firmware by Hp

255 G6 Firmware by Hp

255 G7 Firmware by Hp

255 G8 \(rom Family Ssid 87d1\) Firmware by Hp

255 G8 \(rom Family Ssid 8905\) Firmware by Hp

255 G8 \(rom Family Ssid 890e\) Firmware by Hp

255 G8 Firmware by Hp

255 G9 Firmware by Hp

256 G6 Firmware by Hp

256 G7 Firmware by Hp

258 G6 Firmware by Hp

258 G7 Firmware by Hp

285 G6 Microtower \(rom Family Ssid 871e\) Firmware by Hp

285 G8 Microtower \(rom Family Ssid 870e\) Firmware by Hp

285 Pro G6 Microtower \(rom Family Ssid 871e\) Firmware by Hp

285 Pro G8 Microtower \(rom Family Ssid 870e\) Firmware by Hp

295 G8 Microtower \(rom Family Ssid 870e\) Firmware by Hp

340 G7 Firmware by Hp

348 G7 Firmware by Hp

470 G10 Firmware by Hp

470 G7 Firmware by Hp

470 G9 Firmware by Hp

Desktop Pro A 300 G3 Firmware by Hp

Desktop Pro A G3 Firmware by Hp

Desktop Pro A G3 Microtower Firmware by Hp

Pro Sff 280 G9 Desktop \(rom Family Ssid 89b4\) Firmware by Hp

Pro Sff 280 G9 Desktop \(rom Family Ssid 8bc3\) Firmware by Hp

Pro Sff 290 G9 Desktop \(rom Family Ssid 89b4\) Firmware by Hp

Pro Sff 290 G9 Desktop \(rom Family Ssid 8bc3\) Firmware by Hp

Pro Sff Zhan 66 G9 Desktop \(rom Family Ssid 89b4\) Firmware by Hp

Pro Sff Zhan 66 G9 Desktop \(rom Family Ssid 8bc3\) Firmware by Hp

Pro Tower 200 G9 Desktop \(rom Family Ssid 89b3\) Firmware by Hp

Pro Tower 200 G9 Desktop \(rom Family Ssid 89b4\) Firmware by Hp

Pro Tower 200 G9 Desktop \(rom Family Ssid 8bc3\) Firmware by Hp

Pro Tower 280 G9 Desktop \(rom Family Ssid 89b3\) Firmware by Hp

Pro Tower 280 G9 Desktop \(rom Family Ssid 89b4\) Firmware by Hp

Pro Tower 290 G9 Desktop \(rom Family Ssid 89b3\) Firmware by Hp

Pro Tower 290 G9 Desktop \(rom Family Ssid 89b4\) Firmware by Hp

Pro Tower 290 G9 Desktop \(rom Family Ssid 8bc3\) Firmware by Hp

Pro Tower Zhan 99 G9 Desktop \(rom Family Ssid 89b3\) Firmware by Hp

Pro Tower Zhan 99 G9 Desktop \(rom Family Ssid 89b4\) Firmware by Hp

Pro Tower Zhan 99 G9 Desktop \(rom Family Ssid 8b3c\) Firmware by Hp

Proone 240 G10 \(rom Family Ssid 8b4c\) Firmware by Hp

Proone 240 G10 \(rom Family Ssid 8b4d\) Firmware by Hp

Proone 240 G9 \(rom Family Ssid 89eb\) Firmware by Hp