Vulnerabilities were published as BRLY-2021-050, BRLY-2021-051, BRLY-2021-053 on BINARLY’s Advisories (in English) webpage.īRLY-2021-053 is covered in this security bulletin, mitigated as a matter of updates for CVE-2021-39299 and CVE-2021-39300.īRLY-2021-050 and BRLY-2021-051 are covered by CVE-2022-23954 and CVE-2022-23955 (respectively) in the HP security bulletinĮntitled HP PC BIOS February 2022 Security Update. On May 11, 2022, BINARLY presented new vulnerabilities in HP UEFI Firmware in a presentation at Black Hat® Asia 2022. HP is addressing all sixteen (16) of the vulnerabilities identified in BINARLY’s Mablog report between this security bulletin and in the newer security bulletin HP PC BIOS February 2022 Security Updates for 11 Vulnerabilities issued on March 8. On March 8, 2022, HP released security bulletin HP PC BIOS February 2022 Security Updates for 11 Vulnerabilities for the additional 11 vulnerabilities.Īdditionally on March 8, BINARLY released a blog identifying the combined advisories (the 5 in this bulletin and the 11 newĪdvisories) into a single report of 16 high impact vulnerabilities discovered in HP devices (in English). On March 8, 2022, BINARLY published an additional eleven (11) vulnerabilities in HP UEFI Firmware on their Advisories (in English) webpage. On February 4, 2022, HP released this security bulletin for the five vulnerabilities listed above as part of a coordinatedĭisclosure with BINARLY for the DefensiveCon presentation. On February 4, 2022, BINARLY published five (5) vulnerabilities in HP UEFI Firmware for a presentation at Offensive SecurityĬonference Berlin 2022 (OffensiveCon Berlin 2022).

Eset endpoint security update failed