CVE-2022-23957 Denial of service in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC

Medium 5.5 Published 2 Mar 2022 Updated 8 Oct 2026

A vulnerability in HP PC BIOS allows attackers to cause a denial of service condition on affected notebook and desktop computers.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-23957?

CVE-2022-23957 is a medium-severity denial of service vulnerability in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC, published on 2 Mar 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

Which versions are affected by CVE-2022-23957?

It affects 2 products.

Products include Hp Probook 440 G8 Firmware, Hp Prodesk 405 G6 Small Form Factor Firmware.

How do I fix CVE-2022-23957?

No fix has been published for CVE-2022-23957 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2022-23957 being exploited?

There is no known exploitation of CVE-2022-23957 in the wild and no public exploit code.

Sources

Also known as GHSA-mq3g-r3vh-c836.