{"cve":"CVE-2017-2751","nvd":{"published":"2018-10-03T20:29:07.067","modified":"2026-06-17T01:16:48.393","status":"Modified","description":"A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":4.6},"cwes":["CWE-522"],"references":["https://support.hp.com/us-en/document/c05913581","https://support.hp.com/us-en/document/c05913581"],"products":["hp:compaq_14-h000_firmware","hp:compaq_14-s000_firmware","hp:compaq_cq45-900_firmware","hp:hp_1000-1300_firmware","hp:hp_14-g000_firmware","hp:hp_14-r000_firmware","hp:hp_15-r000_firmware","hp:hp_15-r500_firmware","hp:hp_240_g1_firmware","hp:hp_240_g3_firmware","hp:hp_245_g1_firmware","hp:hp_246_firmware","hp:hp_246_g3_firmware","hp:hp_250_g1_notebook_pc_firmware","hp:hp_255_g1_notebook_pc_firmware","hp:hp_255_g3_firmware","hp:hp_455_firmware","hp:hp_envy_100_firmware","hp:hp_envy_14-k100_firmware","hp:hp_envy_15-j000_firmware","hp:hp_envy_15-j100_firmware","hp:hp_envy_17-j100_leap_motion_se_firmware","hp:hp_envy_17_j100_firmware","hp:hp_envy_m6-n000_firmware","hp:hp_g14-a000_firmware","hp:hp_pavilion_10-f000_firmware","hp:hp_pavilion_11-n000_firmware","hp:hp_pavilion_14-n000_firmware","hp:hp_pavilion_15-n000_firmware","hp:hp_pavilion_15-n200_firmware","hp:hp_pavilion_15-n300_firmware","hp:hp_spectre_13-h200_firmware","hp:hp_spectre_x2_13-smb_pro_firmware","hp:hp_split_13-g200_firmware"],"source":"nvd","synced_at":"2026-10-19T20:53:14.491561039+00:00"},"epss":{"cve":"CVE-2017-2751","score":0.01074,"percentile":0.64953,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}