CVE-2023-6215 - CVE House
Back to Database
Status published High CVE-2023-6215

HP Sure Start IFD Protection - BIOS Security Update

Vulnerability Description

A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to mitigate the potential vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6215

Credits & Attribution

No credits recorded in the NVD database.

References

More from HP, Inc.

View All →
CVE-2025-43491
Poly Lens Desktop Application – Privilege Escalation
High 7.3
CVE-2025-43490
HP Hotkey Support – Escalation of Privilege
High 8.4
CVE-2025-43026
HP Support Assistant – Potential Escalation of Privilege
High 7.1
CVE-2025-43023
HP Linux Imaging and Printing Software - Use of DSA Key
Medium 5.9
CVE-2025-43018
Certain HP LaserJet Pro Printers – Potential Information Disclosure
Medium 6.9

Affected Vendor

Affected Software

HP Sure Start IFD Protection
Vulnerable Versions:
See HP security bulletin reference for affected versions

Timeline

Official Publish: October 7th, 2025
Last Modified: October 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.