Back to Database
Status published
Medium
CVE-2017-2751
A BIOS password extraction vulnerability has been reported on certain...
Vulnerability Description
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-2751
Credits & Attribution
No credits recorded in the NVD database.
More from HP Inc.
View All →CVE-2025-43489
Poly Clariti Manager - Multiple Security Vulnerabilities
Low
2
CVE-2025-43488
Poly Clariti Manager - Multiple Security Vulnerabilities
Low
2
CVE-2025-43487
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium
6.9
CVE-2025-43486
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium
5.7
CVE-2025-43485
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium
5.7
Affected Vendor
HP Inc.
View all reports →Affected Software
HP 240 G1 Notebook PC and certain other consumer notebooks
Vulnerable Versions:
F.22 and other firmware versions
Timeline
Official Publish:
October 3rd, 2018
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.