CVE-2023-6138

HIGH
Published Feb 14, 2024 Modified Dec 22, 2025

Description

A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability.

Is your site exposed to CVE-2023-6138?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.9
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Affected Products

Vendor Product
hp z440_workstation_firmware
hp z440_workstation
hp z640_workstation_firmware
hp z640_workstation
hp z840_workstation_firmware
hp z840_workstation

References

Frequently Asked Questions

What is CVE-2023-6138? +
A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability. It has a CVSS v3.1 base score of 7.9 (HIGH).
How severe is CVE-2023-6138? +
CVE-2023-6138 has a CVSS v3.1 score of 7.9 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2023-6138? +
CVE-2023-6138 affects products from hp, specifically: z440_workstation, z440_workstation_firmware, z640_workstation, z640_workstation_firmware, z840_workstation, z840_workstation_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-6138? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-26506 9.8

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution …
CVE-2025-26507 9.8

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution …
CVE-2025-26508 9.8

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution …
CVE-2024-31466 9.8

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending …
CVE-2024-31467 9.8

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending …
CVE-2024-31468 9.8

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-6138 — free, no signup required.