Medium severity6.8NVD Advisory· Published Jun 10, 2024· Updated Jun 17, 2026
CVE-2022-37020
CVE-2022-37020
Description
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
Affected products
29- HP Inc./HP PC productsv5Range: See HP security bulletin reference for affected versions
- cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:*:*:*:*:*:*:*:*Range: <00.02.64
- cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*Range: <01.62
- cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*Range: <01.62
- cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*Range: <01.62
- cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*Range: <01.62
- cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*Range: <01.62
- cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*Range: <01.62
- cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*Range: <01.62
- cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*Range: <00.02.63
- cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*Range: <00.02.63
- cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*Range: <02.63
- cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*Range: <02.64
- cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:*:*:*:*:*:*:*:*Range: <01.91
- cpe:2.3:o:hp:z238_microtower_workstation_firmware:*:*:*:*:*:*:*:*Range: <01.91
- cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:*:*:*:*:*:*:*:*Range: <01.91
- cpe:2.3:o:hp:z240_tower_workstation_firmware:*:*:*:*:*:*:*:*Range: <01.91
- cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*Range: <1.62
Patches
Vulnerability mechanics
References
1- support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943nvdVendor Advisory
News mentions
0No linked articles in our index yet.