CVSS 3.1
6.8 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:LCVE-2022-37020
Medium (6.8) in hp. EPSS 0.2% chance of exploitation in the next 30 days.
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:elite_slice_firmware
- hp:elite_slice_for_meeting_rooms_firmware
- hp:elitebook_1040_g3_firmware
- hp:elitebook_820_g3_firmware
- hp:elitebook_828_g3_firmware
- hp:elitebook_840_g3_firmware
- hp:elitebook_848_g3_firmware
- hp:elitebook_850_g3_firmware
- hp:elitebook_folio_g1_firmware
- hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware
- hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware
- hp:mp9_g2_retail_system_firmware
- hp:probook_440_g3_firmware
- hp:probook_446_g3_firmware
- hp:probook_470_g3_firmware
- hp:probook_640_g2_firmware
- hp:probook_650_g2_firmware
- hp:rp9_g1_retail_system_firmware
- hp:z238_microtower_workstation_firmware
- hp:z240_small_form_factor_workstation_firmware
- hp:z240_tower_workstation_firmware
- hp:z2_mini_g3_workstation_firmware
- hp:zbook_15_g3_firmware
- hp:zbook_15u_g3_firmware
- hp:zbook_17_g3_firmware
- hp:zbook_studio_g3_firmware