Read the docs
TI-2022-17224 Aliases CVE-2022-37020GHSA-96w6-6hm2-2gpw

HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows

Priority LOW 29CWE-120Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00177 7th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard EnterpriseHP PC productsSee HP security bulletin reference for affected versions and later—No fix listedCNA
  • HP PC products VendorHewlett Packard Enterprise Affected See HP security bulletin reference for affected versions and later Fixed in — No fix listed CNA

CPE configurations NVD · 52

CPEVersionsRoleVendor
cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*before 00.02.64VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:*:*:*:*:*:*:*:*before 00.02.64VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*before 01.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*before 01.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*before 01.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 42 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*before 01.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*before 01.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*before 01.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*before 01.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*before 00.02.63VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*before 00.02.63VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*before 02.63VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*before 02.64VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:*:*:*:*:*:*:*:*before 01.91VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z2_mini_g3_workstation:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z238_microtower_workstation_firmware:*:*:*:*:*:*:*:*before 01.91VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z238_microtower_workstation:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:*:*:*:*:*:*:*:*before 01.91VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z240_small_form_factor_workstation:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z240_tower_workstation_firmware:*:*:*:*:*:*:*:*before 01.91VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z240_tower_workstation:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*before 1.62VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-37020
  2. 2026-10-03 Alias added: GHSA-96w6-6hm2-2gpw

References

Advisory 1

  • TI-2022-17222 Incorrect default permissions in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 8.4
  • TI-2022-13567 Incorrect authorization in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2022-13565 Incorrect authorization in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2022-10542 Code injection in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2021-02740 Improper privilege management in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
  • TI-2021-02739 Improper privilege management in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences