CVE Feed

    Dashboard / CVE / CVE-2022-37019

    CVE-2022-37019

    Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

    Published:Jun 10, 2024
    Last Modified:Jan 14, 2026
    EPS:Jun 10, 2024
    EPSS Score:0.0007
    CVSS Score:6.8

    Affected Products

    Vendor
    Hp
    Product
    Elite Slice
    Vendor
    Hp
    Product
    Elite Slice Firmware
    Vendor
    Hp
    Product
    Elite Slice For Meeting Rooms
    Vendor
    Hp
    Product
    Elite Slice For Meeting Rooms Firmware
    Vendor
    Hp
    Product
    Elitebook 1040 G3
    Vendor
    Hp
    Product
    Elitebook 1040 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 820 G3
    Vendor
    Hp
    Product
    Elitebook 820 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 828 G3
    Vendor
    Hp
    Product
    Elitebook 828 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 840 G3
    Vendor
    Hp
    Product
    Elitebook 840 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 848 G3
    Vendor
    Hp
    Product
    Elitebook 848 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook 850 G3
    Vendor
    Hp
    Product
    Elitebook 850 G3 Firmware
    Vendor
    Hp
    Product
    Elitebook Folio G1
    Vendor
    Hp
    Product
    Elitebook Folio G1 Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 35w G2 Desktop Mini Pc
    Vendor
    Hp
    Product
    Elitedesk 800 35w G2 Desktop Mini Pc Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 65w G2 Desktop Mini Pc
    Vendor
    Hp
    Product
    Elitedesk 800 65w G2 Desktop Mini Pc Firmware
    Vendor
    Hp
    Product
    Mp9 G2 Retail System
    Vendor
    Hp
    Product
    Mp9 G2 Retail System Firmware
    Vendor
    Hp
    Product
    Probook 440 G3
    Vendor
    Hp
    Product
    Probook 440 G3 Firmware
    Vendor
    Hp
    Product
    Probook 446 G3
    Vendor
    Hp
    Product
    Probook 446 G3 Firmware
    Vendor
    Hp
    Product
    Probook 470 G3
    Vendor
    Hp
    Product
    Probook 470 G3 Firmware
    Vendor
    Hp
    Product
    Probook 640 G2
    Vendor
    Hp
    Product
    Probook 640 G2 Firmware
    Vendor
    Hp
    Product
    Probook 650 G2
    Vendor
    Hp
    Product
    Probook 650 G2 Firmware
    Vendor
    Hp
    Product
    Rp9 G1 Retail System
    Vendor
    Hp
    Product
    Rp9 G1 Retail System Firmware
    Vendor
    Hp
    Product
    Z238 Microtower Workstation
    Vendor
    Hp
    Product
    Z238 Microtower Workstation Firmware
    Vendor
    Hp
    Product
    Z240 Small Form Factor Workstation
    Vendor
    Hp
    Product
    Z240 Small Form Factor Workstation Firmware
    Vendor
    Hp
    Product
    Z240 Tower Workstation
    Vendor
    Hp
    Product
    Z240 Tower Workstation Firmware
    Vendor
    Hp
    Product
    Z2 Mini G3 Workstation
    Vendor
    Hp
    Product
    Z2 Mini G3 Workstation Firmware
    Vendor
    Hp
    Product
    Zbook 15 G3
    Vendor
    Hp
    Product
    Zbook 15 G3 Firmware
    Vendor
    Hp
    Product
    Zbook 15u G3
    Vendor
    Hp
    Product
    Zbook 15u G3 Firmware
    Vendor
    Hp
    Product
    Zbook 17 G3
    Vendor
    Hp
    Product
    Zbook 17 G3 Firmware
    Vendor
    Hp
    Product
    Zbook Studio G3
    Vendor
    Hp
    Product
    Zbook Studio G3 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2022-37020 (CVSS 6.8) — Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allo…
    CVE-2022-31646 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31645 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31644 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31639 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31638 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31637 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31636 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31635 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-43778 (CVSS 7.8) — Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certai…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High