CVE-2022-37019 - Vulnerability Details

- HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows

Description

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

Published: 2024-06-10

Score: 6.8 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

HP Inc.

HP PC products

affected

Version	Status	Constraints
`See HP security bulletin reference for affected versions`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:z2_mini_g3_workstation:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:hp:z238_microtower_workstation_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:z238_microtower_workstation:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:z240_small_form_factor_workstation:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:hp:z240_tower_workstation_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:z240_tower_workstation:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00292.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943

History

Wed, 14 Jan 2026 16:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hp Hp elite Slice Hp elite Slice Firmware Hp elite Slice For Meeting Rooms Hp elite Slice For Meeting Rooms Firmware Hp elitebook 1040 G3 Hp elitebook 1040 G3 Firmware Hp elitebook 820 G3 Hp elitebook 820 G3 Firmware Hp elitebook 828 G3 Hp elitebook 828 G3 Firmware Hp elitebook 840 G3 Hp elitebook 840 G3 Firmware Hp elitebook 848 G3 Hp elitebook 848 G3 Firmware Hp elitebook 850 G3 Hp elitebook 850 G3 Firmware Hp elitebook Folio G1 Hp elitebook Folio G1 Firmware Hp elitedesk 800 35w G2 Desktop Mini Pc Hp elitedesk 800 35w G2 Desktop Mini Pc Firmware Hp elitedesk 800 65w G2 Desktop Mini Pc Hp elitedesk 800 65w G2 Desktop Mini Pc Firmware Hp mp9 G2 Retail System Hp mp9 G2 Retail System Firmware Hp probook 440 G3 Hp probook 440 G3 Firmware Hp probook 446 G3 Hp probook 446 G3 Firmware Hp probook 470 G3 Hp probook 470 G3 Firmware Hp probook 640 G2 Hp probook 640 G2 Firmware Hp probook 650 G2 Hp probook 650 G2 Firmware Hp rp9 G1 Retail System Hp rp9 G1 Retail System Firmware Hp z238 Microtower Workstation Hp z238 Microtower Workstation Firmware Hp z240 Small Form Factor Workstation Hp z240 Small Form Factor Workstation Firmware Hp z240 Tower Workstation Hp z240 Tower Workstation Firmware Hp z2 Mini G3 Workstation Hp z2 Mini G3 Workstation Firmware Hp zbook 15 G3 Hp zbook 15 G3 Firmware Hp zbook 15u G3 Hp zbook 15u G3 Firmware Hp zbook 17 G3 Hp zbook 17 G3 Firmware Hp zbook Studio G3 Hp zbook Studio G3 Firmware
CPEs		cpe:2.3:h:hp:elite_slice:-:::::::* cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:::::::* cpe:2.3:h:hp:elitebook_1040_g3:-:::::::* cpe:2.3:h:hp:elitebook_820_g3:-:::::::* cpe:2.3:h:hp:elitebook_828_g3:-:::::::* cpe:2.3:h:hp:elitebook_840_g3:-:::::::* cpe:2.3:h:hp:elitebook_848_g3:-:::::::* cpe:2.3:h:hp:elitebook_850_g3:-:::::::* cpe:2.3:h:hp:elitebook_folio_g1:-:::::::* cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:::::::* cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:::::::* cpe:2.3:h:hp:mp9_g2_retail_system:-:::::::* cpe:2.3:h:hp:probook_440_g3:-:::::::* cpe:2.3:h:hp:probook_446_g3:-:::::::* cpe:2.3:h:hp:probook_470_g3:-:::::::* cpe:2.3:h:hp:probook_640_g2:-:::::::* cpe:2.3:h:hp:probook_650_g2:-:::::::* cpe:2.3:h:hp:rp9_g1_retail_system:-:::::::* cpe:2.3:h:hp:z238_microtower_workstation:-:::::::* cpe:2.3:h:hp:z240_small_form_factor_workstation:-:::::::* cpe:2.3:h:hp:z240_tower_workstation:-:::::::* cpe:2.3:h:hp:z2_mini_g3_workstation:-:::::::* cpe:2.3:h:hp:zbook_15_g3:-:::::::* cpe:2.3:h:hp:zbook_15u_g3:-:::::::* cpe:2.3:h:hp:zbook_17_g3:-:::::::* cpe:2.3:h:hp:zbook_studio_g3:-:::::::* cpe:2.3:o:hp:elite_slice_firmware:::::::: cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:::::::: cpe:2.3:o:hp:elitebook_1040_g3_firmware:::::::: cpe:2.3:o:hp:elitebook_820_g3_firmware:::::::: cpe:2.3:o:hp:elitebook_828_g3_firmware:::::::: cpe:2.3:o:hp:elitebook_840_g3_firmware:::::::: cpe:2.3:o:hp:elitebook_848_g3_firmware:::::::: cpe:2.3:o:hp:elitebook_850_g3_firmware:::::::: cpe:2.3:o:hp:elitebook_folio_g1_firmware:::::::: cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:::::::: cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:::::::: cpe:2.3:o:hp:mp9_g2_retail_system_firmware:::::::: cpe:2.3:o:hp:probook_440_g3_firmware:::::::: cpe:2.3:o:hp:probook_446_g3_firmware:::::::: cpe:2.3:o:hp:probook_470_g3_firmware:::::::: cpe:2.3:o:hp:probook_640_g2_firmware:::::::: cpe:2.3:o:hp:probook_650_g2_firmware:::::::: cpe:2.3:o:hp:rp9_g1_retail_system_firmware:::::::: cpe:2.3:o:hp:z238_microtower_workstation_firmware:::::::: cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:::::::: cpe:2.3:o:hp:z240_tower_workstation_firmware:::::::: cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:::::::: cpe:2.3:o:hp:zbook_15_g3_firmware:::::::: cpe:2.3:o:hp:zbook_15u_g3_firmware:::::::: cpe:2.3:o:hp:zbook_17_g3_firmware:::::::: cpe:2.3:o:hp:zbook_studio_g3_firmware::::::::
Vendors & Products		Hp Hp elite Slice Hp elite Slice Firmware Hp elite Slice For Meeting Rooms Hp elite Slice For Meeting Rooms Firmware Hp elitebook 1040 G3 Hp elitebook 1040 G3 Firmware Hp elitebook 820 G3 Hp elitebook 820 G3 Firmware Hp elitebook 828 G3 Hp elitebook 828 G3 Firmware Hp elitebook 840 G3 Hp elitebook 840 G3 Firmware Hp elitebook 848 G3 Hp elitebook 848 G3 Firmware Hp elitebook 850 G3 Hp elitebook 850 G3 Firmware Hp elitebook Folio G1 Hp elitebook Folio G1 Firmware Hp elitedesk 800 35w G2 Desktop Mini Pc Hp elitedesk 800 35w G2 Desktop Mini Pc Firmware Hp elitedesk 800 65w G2 Desktop Mini Pc Hp elitedesk 800 65w G2 Desktop Mini Pc Firmware Hp mp9 G2 Retail System Hp mp9 G2 Retail System Firmware Hp probook 440 G3 Hp probook 440 G3 Firmware Hp probook 446 G3 Hp probook 446 G3 Firmware Hp probook 470 G3 Hp probook 470 G3 Firmware Hp probook 640 G2 Hp probook 640 G2 Firmware Hp probook 650 G2 Hp probook 650 G2 Firmware Hp rp9 G1 Retail System Hp rp9 G1 Retail System Firmware Hp z238 Microtower Workstation Hp z238 Microtower Workstation Firmware Hp z240 Small Form Factor Workstation Hp z240 Small Form Factor Workstation Firmware Hp z240 Tower Workstation Hp z240 Tower Workstation Firmware Hp z2 Mini G3 Workstation Hp z2 Mini G3 Workstation Firmware Hp zbook 15 G3 Hp zbook 15 G3 Firmware Hp zbook 15u G3 Hp zbook 15u G3 Firmware Hp zbook 17 G3 Hp zbook 17 G3 Firmware Hp zbook Studio G3 Hp zbook Studio G3 Firmware

Thu, 27 Mar 2025 20:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-269
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Subscriptions

Hp Elite Slice Elite Slice Firmware Elite Slice For Meeting Rooms Elite Slice For Meeting Rooms Firmware Elitebook 1040 G3 Elitebook 1040 G3 Firmware Elitebook 820 G3 Elitebook 820 G3 Firmware Elitebook 828 G3 Elitebook 828 G3 Firmware Elitebook 840 G3 Elitebook 840 G3 Firmware Elitebook 848 G3 Elitebook 848 G3 Firmware Elitebook 850 G3 Elitebook 850 G3 Firmware Elitebook Folio G1 Elitebook Folio G1 Firmware Elitedesk 800 35w G2 Desktop Mini Pc Elitedesk 800 35w G2 Desktop Mini Pc Firmware Elitedesk 800 65w G2 Desktop Mini Pc Elitedesk 800 65w G2 Desktop Mini Pc Firmware Mp9 G2 Retail System Mp9 G2 Retail System Firmware Probook 440 G3 Probook 440 G3 Firmware Probook 446 G3 Probook 446 G3 Firmware Probook 470 G3 Probook 470 G3 Firmware Probook 640 G2 Probook 640 G2 Firmware Probook 650 G2 Probook 650 G2 Firmware Rp9 G1 Retail System Rp9 G1 Retail System Firmware Z238 Microtower Workstation Z238 Microtower Workstation Firmware Z240 Small Form Factor Workstation Z240 Small Form Factor Workstation Firmware Z240 Tower Workstation Z240 Tower Workstation Firmware Z2 Mini G3 Workstation Z2 Mini G3 Workstation Firmware Zbook 15 G3 Zbook 15 G3 Firmware Zbook 15u G3 Zbook 15u G3 Firmware Zbook 17 G3 Zbook 17 G3 Firmware Zbook Studio G3 Zbook Studio G3 Firmware

MITRE

Status: PUBLISHED

Assigner: hp

Published: 2024-06-10T22:12:52.278Z

Updated: 2025-03-27T19:49:35.233Z

Reserved: 2022-07-28T22:58:23.255Z

Link: CVE-2022-37019

Vulnrichment

Updated: 2024-08-03T10:21:32.328Z

NVD

Status : Analyzed

Published: 2024-06-10T23:15:49.413

Modified: 2026-01-14T16:40:14.753

Link: CVE-2022-37019

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-269

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object