Read the docs
TI-2022-17222 Aliases CVE-2022-37018GHSA-vv23-8mw3-7r7r

Incorrect default permissions in Hewlett Packard Enterprise HP PC BIOS

Priority LOW 38CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00246 15th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard EnterpriseHP PC BIOSSee HP Security Bulletin reference for affected versions.—No fix listedCNA
  • HP PC BIOS VendorHewlett Packard Enterprise Affected See HP Security Bulletin reference for affected versions. Fixed in — No fix listed CNA

CPE configurations NVD · 150

CPEVersionsRoleVendor
cpe:2.3:o:hp:z1_g3_firmware:*:*:*:*:*:*:*:*before 01.33VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z1_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z2_mini_g3_firmware:*:*:*:*:*:*:*:*before 01.85VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z2_mini_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z238_microtower_firmware:*:*:*:*:*:*:*:*before 01.85VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z238_microtower:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z240_sff_firmware:*:*:*:*:*:*:*:*before 01.85VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z240_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z240_tower_firmware:*:*:*:*:*:*:*:*before 01.85VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z240_tower:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 140 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:engage_one_aio_system_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:engage_one_aio_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_35w_g3_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_35w_g3_desktop_mini_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_65w_g3_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_65w_g3_desktop_mini_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_g2_sff_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_g2_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:eliteone_800_g2_aio_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:eliteone_800_g2_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:eliteone_800_g3_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:eliteone_800_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g3_dm_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g3_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g4_microtower_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g4_microtower:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g4_sff_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g4_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_480_g4_microtower_pc_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_480_g4_microtower_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g2_dm_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g2_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g2_microtower_pc_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g2_microtower_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g2_sff_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g2_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g3_desktop_mini_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g3_desktop_mini:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g3_microtower_pc_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g3_microtower_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g3_sff_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g3_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_680_g2_microtower_pc_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_680_g2_microtower_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_680_g3_microtower_pc_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_680_g3_microtower_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_400_g2_aio_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_400_g2_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_400_g3_aio_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_400_g3_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_480_g3_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_480_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_600_g2_aio_firmware:*:*:*:*:*:*:*:*before 02.59VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_600_g2_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_600_g3_firmware:*:*:*:*:*:*:*:*before 02.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_600_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_x2_1012_g1_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_x2_1012_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_x2_1012_g2_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_x2_1012_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1030_g1_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1030_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1040_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1040_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_820_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_820_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_828_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_828_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_840_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_848_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_848_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_850_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_850_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_x360_1020_g2_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_x360_1020_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_x360_1030_g2_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_x360_1030_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_11_g2_firmware:*:*:*:*:education:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_11_g2:-:*:*:*:education:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pro_x2_612_g2_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pro_x2_612_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_430_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_430_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_440_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_440_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_450_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_450_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_470_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_470_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_640_g3_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_640_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_650_g3_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_650_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_x360_11_g2_firmware:*:*:*:*:education:*:*:*before 1.46VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_x360_11_g2:-:*:*:*:education:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_14u_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_14u_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15u_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15u_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_17_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_17_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*before 01.58VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_studio_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_studio_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_studio_x2_g4_firmware:*:*:*:*:*:*:*:*before 01.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_studio_x2_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-37018
  2. 2026-10-03 Alias added: GHSA-vv23-8mw3-7r7r

References

  • TI-2022-13567 Incorrect authorization in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2022-13565 Incorrect authorization in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2022-10542 Code injection in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2021-02740 Improper privilege management in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2021-02739 Improper privilege management in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2019-12258 A potential security vulnerability has been identified in multiple HP products and… CVSS 3.1HIGH 7.2
See all 21 →

Sources