Auth bypass in HP, Inc. HP Sure Start Ifd Protection
CVE-2023-6215
A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to mitigate the potential vulnerability.
Vulnerability class: Broken Authentication
EPSS: 0.002 (11.4th percentile) — read the EPSS interpretation.
Affected products
- Hp, Inc. Hp Sure Start Ifd Protection — versions See HP security bulletin reference for affected versions
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2023-6215?
- CVE-2023-6215 is a vulnerability in HP, Inc. HP Sure Start Ifd Protection, classified under Missing Authentication for Critical Function. Published 2025-10-07.
- Is CVE-2023-6215 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.