CVE-2022-37019

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

Score

CVSS 3.1 6.8 Medium

Status

Analyzed - hp-security-alert@hp.com

Published

2024-06-10

Last modified

2025-03-27

Weaknesses

CWE-269

Affected products

• Elite Slice Firmware (Hp)
• Elite Slice For Meeting Rooms Firmware (Hp)
• Elitebook 1040 G3 Firmware (Hp)
• Elitebook 820 G3 Firmware (Hp)
• Elitebook 828 G3 Firmware (Hp)
• Elitebook 840 G3 Firmware (Hp)
• Elitebook 848 G3 Firmware (Hp)
• Elitebook 850 G3 Firmware (Hp)
• Elitebook Folio G1 Firmware (Hp)
• Elitedesk 800 35w G2 Desktop Mini Pc Firmware (Hp)
• Elitedesk 800 65w G2 Desktop Mini Pc Firmware (Hp)
• Mp9 G2 Retail System Firmware (Hp)
• Probook 440 G3 Firmware (Hp)
• Probook 446 G3 Firmware (Hp)
• Probook 470 G3 Firmware (Hp)
• Probook 640 G2 Firmware (Hp)
• Probook 650 G2 Firmware (Hp)
• Rp9 G1 Retail System Firmware (Hp)
• Z238 Microtower Workstation Firmware (Hp)
• Z240 Small Form Factor Workstation Firmware (Hp)
• Z240 Tower Workstation Firmware (Hp)
• Z2 Mini G3 Workstation Firmware (Hp)
• Zbook 15 G3 Firmware (Hp)
• Zbook 15u G3 Firmware (Hp)
• Zbook 17 G3 Firmware (Hp)
• Zbook Studio G3 Firmware (Hp)
• Hp Pc Products (Hp Inc.)

References

• https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943