1. Home
  2. CVE Database
  3. CVE-2022-37019
MEDIUM · 6.8

CVE-2022-37019

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate ...

Vulnerability Description

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
HpElite Slice Firmware< 00.02.64
HpElite Slice-
HpElite Slice For Meeting Rooms Firmware< 00.02.64
HpElite Slice For Meeting Rooms-
HpElitebook 1040 G3 Firmware< 01.62
HpElitebook 1040 G3-
HpElitebook 820 G3 Firmware< 01.62
HpElitebook 820 G3-
HpElitebook 828 G3 Firmware< 01.62
HpElitebook 828 G3-
HpElitebook 840 G3 Firmware< 01.62
HpElitebook 840 G3-
HpElitebook 848 G3 Firmware< 01.62
HpElitebook 848 G3-
HpElitebook 850 G3 Firmware< 01.62
HpElitebook 850 G3-
HpElitebook Folio G1 Firmware< 01.62
HpElitebook Folio G1-
HpElitedesk 800 35W G2 Desktop Mini Pc Firmware< 00.02.63
HpElitedesk 800 35W G2 Desktop Mini Pc-

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2022-37019?

CVE-2022-37019 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate ...

How severe is CVE-2022-37019?

CVE-2022-37019 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-37019?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Elite Slice Firmware, Hp Elite Slice, Hp Elite Slice For Meeting Rooms Firmware, Hp Elite Slice For Meeting Rooms, Hp Elitebook 1040 G3 Firmware.