{"id":48422,"date":"2022-09-13T15:10:26","date_gmt":"2022-09-13T15:10:26","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33832\/One-Month-After-Black-Hat-Exposure-HP-Enterprise-Kit-Still-Unpatched.html"},"modified":"2022-09-13T15:10:26","modified_gmt":"2022-09-13T15:10:26","slug":"one-month-after-black-hat-exposure-hp-enterprise-kit-still-unpatched","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/one-month-after-black-hat-exposure-hp-enterprise-kit-still-unpatched\/","title":{"rendered":"One Month After Black Hat Exposure HP Enterprise Kit Still Unpatched"},"content":{"rendered":"

Multiple high-severity firmware bugs in HP enterprise computers remain unpatched, some more than a year after Binarly security researchers disclosed the vulnerabilities to HP and then discussed them at the Black Hat security conference last month.<\/p>\n

This means that the vulnerabilities, with severity scores ranging from 7.5 to 8.2, can still be exploited by miscreants looking to perform a range of nefarious deeds, from stealing data to shutting down the machine altogether. And because the bugs were the subject of a Black Hat talk<\/a>, would-be cybercriminals essentially have a how-to kit available at their disposal. <\/p>\n

HP is “aware of potential SMM vulnerabilities reported by Binarly,” according to a spokesperson, who directed The Register<\/em> to a security alert from March that addressed one of the bugs (CVE-2022-23930<\/a>).<\/p>\n