CVE Feed

    Dashboard / CVE / CVE-2022-37018

    CVE-2022-37018

    A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

    Published:Nov 21, 2022
    Last Modified:Apr 29, 2025
    EPS:Nov 21, 2022
    EPSS Score:0.0017
    CVSS Score:8.4

    Affected Products

    Vendor
    Hp
    Product
    Elite Slice
    Vendor
    Hp
    Product
    Elite Slice Firmware
    Vendor
    Hp
    Product
    Elite X2 1012 G1
    Vendor
    Hp
    Product
    Elite X2 1012 G1 Firmware
    Vendor
    Hp
    Product
    Elite X2 1012 G2
    Vendor
    Hp
    Product
    Elite X2 1012 G2 Firmware
    Vendor
    Hp
    Product
    Elitebook 1030 G1
    Vendor
    Hp
    Product
    Elitebook 1030 G1 Firmware
    Vendor
    Hp
    Product
    Elitebook 1040 G3
    Vendor
    Hp
    Product
    Elitebook 1040 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 1040 G4
    Vendor
    Hp
    Product
    Elitebook 1040 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook 820 G3
    Vendor
    Hp
    Product
    Elitebook 820 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 820 G4
    Vendor
    Hp
    Product
    Elitebook 820 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook 828 G3
    Vendor
    Hp
    Product
    Elitebook 828 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 828 G4
    Vendor
    Hp
    Product
    Elitebook 828 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook 840 G3
    Vendor
    Hp
    Product
    Elitebook 840 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 840 G4
    Vendor
    Hp
    Product
    Elitebook 840 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook 848 G3
    Vendor
    Hp
    Product
    Elitebook 848 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 848 G4
    Vendor
    Hp
    Product
    Elitebook 848 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook 850 G3
    Vendor
    Hp
    Product
    Elitebook 850 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 850 G4
    Vendor
    Hp
    Product
    Elitebook 850 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook Folio G1
    Vendor
    Hp
    Product
    Elitebook Folio G1 Firmware
    Vendor
    Hp
    Product
    Elitebook X360 1020 G2
    Vendor
    Hp
    Product
    Elitebook X360 1020 G2 Firmware
    Vendor
    Hp
    Product
    Elitebook X360 1030 G2
    Vendor
    Hp
    Product
    Elitebook X360 1030 G2 Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 35w G2 Desktop Mini Pc
    Vendor
    Hp
    Product
    Elitedesk 800 35w G2 Desktop Mini Pc Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 35w G3 Desktop Mini Pc
    Vendor
    Hp
    Product
    Elitedesk 800 35w G3 Desktop Mini Pc Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 65w G2 Desktop Mini Pc
    Vendor
    Hp
    Product
    Elitedesk 800 65w G2 Desktop Mini Pc Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 65w G3 Desktop Mini Pc
    Vendor
    Hp
    Product
    Elitedesk 800 65w G3 Desktop Mini Pc Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 G2 Sff
    Vendor
    Hp
    Product
    Elitedesk 800 G2 Sff Firmware
    Vendor
    Hp
    Product
    Eliteone 800 G2 Aio
    Vendor
    Hp
    Product
    Eliteone 800 G2 Aio Firmware
    Vendor
    Hp
    Product
    Eliteone 800 G3
    Vendor
    Hp
    Product
    Eliteone 800 G3 Firmware
    Vendor
    Hp
    Product
    Engage One Aio System
    Vendor
    Hp
    Product
    Engage One Aio System Firmware
    Vendor
    Hp
    Product
    Mp9 G2 Retail System
    Vendor
    Hp
    Product
    Mp9 G2 Retail System Firmware
    Vendor
    Hp
    Product
    Pro X2 612 G2
    Vendor
    Hp
    Product
    Pro X2 612 G2 Firmware
    Vendor
    Hp
    Product
    Probook 11 G2
    Vendor
    Hp
    Product
    Probook 11 G2 Firmware
    Vendor
    Hp
    Product
    Probook 430 G4
    Vendor
    Hp
    Product
    Probook 430 G4 Firmware
    Vendor
    Hp
    Product
    Probook 440 G3
    Vendor
    Hp
    Product
    Probook 440 G3 Firmware
    Vendor
    Hp
    Product
    Probook 440 G4
    Vendor
    Hp
    Product
    Probook 440 G4 Firmware
    Vendor
    Hp
    Product
    Probook 446 G3
    Vendor
    Hp
    Product
    Probook 446 G3 Firmware
    Vendor
    Hp
    Product
    Probook 450 G4
    Vendor
    Hp
    Product
    Probook 450 G4 Firmware
    Vendor
    Hp
    Product
    Probook 470 G3
    Vendor
    Hp
    Product
    Probook 470 G3 Firmware
    Vendor
    Hp
    Product
    Probook 470 G4
    Vendor
    Hp
    Product
    Probook 470 G4 Firmware
    Vendor
    Hp
    Product
    Probook 640 G2
    Vendor
    Hp
    Product
    Probook 640 G2 Firmware
    Vendor
    Hp
    Product
    Probook 640 G3
    Vendor
    Hp
    Product
    Probook 640 G3 Firmware
    Vendor
    Hp
    Product
    Probook 650 G2
    Vendor
    Hp
    Product
    Probook 650 G2 Firmware
    Vendor
    Hp
    Product
    Probook 650 G3
    Vendor
    Hp
    Product
    Probook 650 G3 Firmware
    Vendor
    Hp
    Product
    Probook X360 11 G2
    Vendor
    Hp
    Product
    Probook X360 11 G2 Firmware
    Vendor
    Hp
    Product
    Prodesk 400 G3 Dm
    Vendor
    Hp
    Product
    Prodesk 400 G3 Dm Firmware
    Vendor
    Hp
    Product
    Prodesk 400 G4 Microtower
    Vendor
    Hp
    Product
    Prodesk 400 G4 Microtower Firmware
    Vendor
    Hp
    Product
    Prodesk 400 G4 Sff
    Vendor
    Hp
    Product
    Prodesk 400 G4 Sff Firmware
    Vendor
    Hp
    Product
    Prodesk 480 G4 Microtower Pc
    Vendor
    Hp
    Product
    Prodesk 480 G4 Microtower Pc Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G2 Dm
    Vendor
    Hp
    Product
    Prodesk 600 G2 Dm Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G2 Microtower Pc
    Vendor
    Hp
    Product
    Prodesk 600 G2 Microtower Pc Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G2 Sff
    Vendor
    Hp
    Product
    Prodesk 600 G2 Sff Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G3 Desktop Mini
    Vendor
    Hp
    Product
    Prodesk 600 G3 Desktop Mini Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G3 Microtower Pc
    Vendor
    Hp
    Product
    Prodesk 600 G3 Microtower Pc Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G3 Sff
    Vendor
    Hp
    Product
    Prodesk 600 G3 Sff Firmware
    Vendor
    Hp
    Product
    Prodesk 680 G2 Microtower Pc
    Vendor
    Hp
    Product
    Prodesk 680 G2 Microtower Pc Firmware
    Vendor
    Hp
    Product
    Prodesk 680 G3 Microtower Pc
    Vendor
    Hp
    Product
    Prodesk 680 G3 Microtower Pc Firmware
    Vendor
    Hp
    Product
    Proone 400 G2 Aio
    Vendor
    Hp
    Product
    Proone 400 G2 Aio Firmware
    Vendor
    Hp
    Product
    Proone 400 G3 Aio
    Vendor
    Hp
    Product
    Proone 400 G3 Aio Firmware
    Vendor
    Hp
    Product
    Proone 480 G3
    Vendor
    Hp
    Product
    Proone 480 G3 Firmware
    Vendor
    Hp
    Product
    Proone 600 G2 Aio
    Vendor
    Hp
    Product
    Proone 600 G2 Aio Firmware
    Vendor
    Hp
    Product
    Proone 600 G3
    Vendor
    Hp
    Product
    Proone 600 G3 Firmware
    Vendor
    Hp
    Product
    Rp9 G1 Retail System
    Vendor
    Hp
    Product
    Rp9 G1 Retail System Firmware
    Vendor
    Hp
    Product
    Z1 G3
    Vendor
    Hp
    Product
    Z1 G3 Firmware
    Vendor
    Hp
    Product
    Z238 Microtower
    Vendor
    Hp
    Product
    Z238 Microtower Firmware
    Vendor
    Hp
    Product
    Z240 Sff
    Vendor
    Hp
    Product
    Z240 Sff Firmware
    Vendor
    Hp
    Product
    Z240 Tower
    Vendor
    Hp
    Product
    Z240 Tower Firmware
    Vendor
    Hp
    Product
    Z2 Mini G3
    Vendor
    Hp
    Product
    Z2 Mini G3 Firmware
    Vendor
    Hp
    Product
    Zbook 14u G4
    Vendor
    Hp
    Product
    Zbook 14u G4 Firmware
    Vendor
    Hp
    Product
    Zbook 15 G3
    Vendor
    Hp
    Product
    Zbook 15 G3 Firmware
    Vendor
    Hp
    Product
    Zbook 15 G4
    Vendor
    Hp
    Product
    Zbook 15 G4 Firmware
    Vendor
    Hp
    Product
    Zbook 15u G3
    Vendor
    Hp
    Product
    Zbook 15u G3 Firmware
    Vendor
    Hp
    Product
    Zbook 15u G4
    Vendor
    Hp
    Product
    Zbook 15u G4 Firmware
    Vendor
    Hp
    Product
    Zbook 17 G3
    Vendor
    Hp
    Product
    Zbook 17 G3 Firmware
    Vendor
    Hp
    Product
    Zbook 17 G4
    Vendor
    Hp
    Product
    Zbook 17 G4 Firmware
    Vendor
    Hp
    Product
    Zbook Studio G3
    Vendor
    Hp
    Product
    Zbook Studio G3 Firmware
    Vendor
    Hp
    Product
    Zbook Studio G4
    Vendor
    Hp
    Product
    Zbook Studio G4 Firmware
    Vendor
    Hp
    Product
    Zbook Studio X2 G4
    Vendor
    Hp
    Product
    Zbook Studio X2 G4 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2022-37020 (CVSS 6.8) — Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allo…
    CVE-2022-37019 (CVSS 6.8) — Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow e…
    CVE-2022-31646 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31645 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31644 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31639 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31638 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31637 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31636 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31635 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High