Security Resilience

CVE-2023-6138

Hp Z440 Workstation Firmware ≤ 2.62

Published
14 February 2024
Modified
22 December 2025
Patch / advisory
View advisory
CVSS Score v3.1 7.9
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
EPSS Score 0.0019 8th percentile
Risk Priority 50 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-6138 is a high-severity an unspecified weakness vulnerability in Hp Z440 Workstation Firmware. Its CVSS base score is 7.9 (High).

Operationally, ranked at the 8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-43023Same vendor: Hp
CVE-2025-43017Same vendor: Hp
CVE-2017-12542Same vendor: Hp
CVE-2020-7200Same vendor: Hp
CVE-2023-26299Same vendor: Hp
CVE-2024-3281Same vendor: Hp
CVE-2017-2741Same vendor: Hp
CVE-2025-43486Same vendor: Hp
CVE-2023-5739Same vendor: Hp
CVE-2026-91100Same vendor: Hp

Affected Assets

hp
z440 workstation firmware
≤ 2.62
hp
z640 workstation firmware
≤ 2.62
hp
z840 workstation firmware
≤ 2.62

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References