Vulnerability Description
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hp | Elite Dragonfly Firmware | < 01.21.01 |
| Hp | Elite Dragonfly | - |
| Hp | Elite Dragonfly G3 Firmware | < 01.03.01 |
| Hp | Elite Dragonfly G3 | - |
| Hp | Elite X2 1012 G2 Firmware | < 1.43 |
| Hp | Elite X2 1012 G2 | - |
| Hp | Elite X2 1013 G3 Firmware | < 01.21.01 |
| Hp | Elite X2 1013 G3 | - |
| Hp | Elite X2 G4 Firmware | < 01.21.01 |
| Hp | Elite X2 G4 | - |
| Hp | Elite X360 1040 G9 Firmware | < 01.03.01 |
| Hp | Elite X360 1040 G9 | - |
| Hp | Elite X360 830 G9 Firmware | < 01.03.01 |
| Hp | Elite X360 830 G9 | - |
| Hp | Elitebook 1040 G9 Firmware | < 01.03.01 |
| Hp | Elitebook 1040 G9 | - |
| Hp | Elitebook 1040 G4 Firmware | < 1.43 |
| Hp | Elitebook 1040 G4 | - |
| Hp | Elitebook 1050 G1 Firmware | < 01.21.02 |
| Hp | Elitebook 1050 G1 | - |
Related Weaknesses (CWE)
References
- https://support.hp.com/us-en/document/ish_6662920-6662944-16/hpsbhf03805Vendor Advisory
- https://support.hp.com/us-en/document/ish_6662920-6662944-16/hpsbhf03805Vendor Advisory
FAQ
What is CVE-2022-31641?
CVE-2022-31641 is a vulnerability with a CVSS score of 7.0 (HIGH). Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information dis...
How severe is CVE-2022-31641?
CVE-2022-31641 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-31641?
Check the references section above for vendor advisories and patch information. Affected products include: Hp Elite Dragonfly Firmware, Hp Elite Dragonfly, Hp Elite Dragonfly G3 Firmware, Hp Elite Dragonfly G3, Hp Elite X2 1012 G2 Firmware.