High severity · published Aug 13, 2025
CVE-2024-5477
A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of…
7.3
CVSS
0.2%
EPSS
No
On KEV
Description
A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasing firmware mitigation for the potential vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Certain HP PC Products · HP Inc.
See HP Security Bulletin reference for affected versions. · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-5477
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-5477
support.hp.com
https://support.hp.com/us-en/document/ish_12878449-12878471-16/hpsbhf04043
More from Certain HP PC Products
9.8
CVE-2024-4143
Certain HP PC products using AMI BIOS – Buffer Overflow