Skip to content
Fencer Intel
medium 4.6

CVE-2017-2751 json

A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others.

published 2018-10-03 8 y ago modified 2026-06-17 4 mo ago also EUVD-2017-11894

cvss
4.6
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.1%
EPSS 1.1% chance of exploitation in 30 days, percentile 65%
public exploits
0
none known

Summary

A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.

Patch / fix

  • hp hp_240_g1_firmware f.48
  • hp hp_245_g1_firmware f.48
  • hp hp_1000-1300_firmware f.48
  • hp hp_250_g1_notebook_pc_firmware f.47
  • hp hp_255_g1_notebook_pc_firmware f.47
  • hp hp_envy_15-j000_firmware f.22
  • hp hp_envy_15-j100_firmware f.71
  • hp hp_pavilion_15-n000_firmware f.72
  • hp hp_246_firmware f.04
  • hp hp_455_firmware f.08
  • hp hp_envy_17_j100_firmware f.71
  • hp hp_envy_17-j100_leap_motion_se_firmware f.71
  • hp hp_split_13-g200_firmware f.25
  • hp hp_envy_100_firmware f.22
  • hp hp_pavilion_14-n000_firmware f.72
  • hp hp_envy_14-k100_firmware f.22
  • hp hp_spectre_x2_13-smb_pro_firmware f.25
  • hp hp_spectre_13-h200_firmware f.25
  • hp hp_pavilion_15-n200_firmware f.72
  • hp hp_pavilion_15-n300_firmware f.72

Exploit prediction

1.07% chance of exploitation in the next 30 days, higher than 65% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 4.6 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • HP Inc. HP 240 G1 Notebook PC and certain other consumer notebooks

Classification

Weakness
  • CWE-522 Insufficiently Protected Credentials

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.