CVE-2022-37019

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-37019
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 Vendor Advisory
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z2_mini_g3_workstation:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:hp:z238_microtower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z238_microtower_workstation:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_small_form_factor_workstation:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:hp:z240_tower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_tower_workstation:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*
History

14 Jan 2026, 16:40

Type Values Removed Values Added
References () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 - () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 - Vendor Advisory
First Time Hp elitebook 850 G3 Firmware
Hp elitebook 820 G3
Hp zbook 17 G3
Hp rp9 G1 Retail System
Hp elitebook 848 G3
Hp elitebook 840 G3 Firmware
Hp zbook 15 G3
Hp probook 650 G2
Hp z240 Tower Workstation
Hp mp9 G2 Retail System Firmware
Hp zbook Studio G3
Hp probook 650 G2 Firmware
Hp elitebook 820 G3 Firmware
Hp probook 640 G2 Firmware
Hp elitebook 850 G3
Hp z240 Small Form Factor Workstation
Hp z240 Small Form Factor Workstation Firmware
Hp elitedesk 800 35w G2 Desktop Mini Pc Firmware
Hp elitebook 840 G3
Hp elite Slice For Meeting Rooms
Hp z2 Mini G3 Workstation Firmware
Hp zbook 15u G3 Firmware
Hp elitebook 1040 G3 Firmware
Hp probook 470 G3
Hp probook 440 G3
Hp elitebook 848 G3 Firmware
Hp probook 446 G3 Firmware
Hp probook 470 G3 Firmware
Hp elite Slice
Hp elitebook 828 G3 Firmware
Hp z240 Tower Workstation Firmware
Hp rp9 G1 Retail System Firmware
Hp z238 Microtower Workstation Firmware
Hp elitebook 828 G3
Hp zbook 15u G3
Hp z238 Microtower Workstation
Hp elitedesk 800 65w G2 Desktop Mini Pc Firmware
Hp elite Slice Firmware
Hp probook 640 G2
Hp probook 446 G3
Hp elitebook Folio G1
Hp elitedesk 800 35w G2 Desktop Mini Pc
Hp zbook 15 G3 Firmware
Hp zbook Studio G3 Firmware
Hp zbook 17 G3 Firmware
Hp elitebook Folio G1 Firmware
Hp elitebook 1040 G3
Hp mp9 G2 Retail System
Hp
Hp elite Slice For Meeting Rooms Firmware
Hp probook 440 G3 Firmware
Hp elitedesk 800 65w G2 Desktop Mini Pc
Hp z2 Mini G3 Workstation
CPE cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:z238_microtower_workstation:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:z2_mini_g3_workstation:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_small_form_factor_workstation:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:z238_microtower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:z240_tower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_tower_workstation:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*

27 Mar 2025, 20:15

Type Values Removed Values Added
CWE CWE-269

21 Nov 2024, 07:14

Type Values Removed Values Added
References () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 - () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 -

03 Jul 2024, 01:38

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.8

11 Jun 2024, 13:54

Type Values Removed Values Added
Summary
  • (es) Se han identificado posibles vulnerabilidades en el BIOS del sistema para ciertos productos de PC HP que pueden permitir la escalada de privilegios y la ejecución de código. HP está lanzando actualizaciones de firmware para mitigar las posibles vulnerabilidades.

10 Jun 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-10 23:15

Updated : 2026-01-14 16:40

NVD link : CVE-2022-37019

Mitre link : CVE-2022-37019

CVE.ORG link : CVE-2022-37019

JSON object : View

Products Affected

hp

  • elitebook_820_g3
  • z238_microtower_workstation
  • elite_slice_firmware
  • probook_470_g3_firmware
  • elite_slice_for_meeting_rooms
  • elitebook_1040_g3
  • probook_650_g2
  • elitedesk_800_65w_g2_desktop_mini_pc_firmware
  • probook_470_g3
  • elitebook_840_g3
  • probook_446_g3_firmware
  • elitebook_848_g3_firmware
  • zbook_studio_g3
  • elite_slice_for_meeting_rooms_firmware
  • zbook_studio_g3_firmware
  • z2_mini_g3_workstation
  • elitebook_850_g3_firmware
  • zbook_15u_g3
  • probook_446_g3
  • z240_tower_workstation_firmware
  • elitedesk_800_65w_g2_desktop_mini_pc
  • elite_slice
  • mp9_g2_retail_system
  • mp9_g2_retail_system_firmware
  • elitebook_840_g3_firmware
  • probook_440_g3_firmware
  • zbook_15_g3
  • elitebook_folio_g1_firmware
  • elitedesk_800_35w_g2_desktop_mini_pc_firmware
  • elitedesk_800_35w_g2_desktop_mini_pc
  • rp9_g1_retail_system_firmware
  • elitebook_1040_g3_firmware
  • elitebook_820_g3_firmware
  • elitebook_828_g3
  • elitebook_848_g3
  • z240_small_form_factor_workstation_firmware
  • rp9_g1_retail_system
  • probook_440_g3
  • probook_640_g2
  • zbook_15u_g3_firmware
  • elitebook_850_g3
  • probook_650_g2_firmware
  • z240_small_form_factor_workstation
  • zbook_17_g3
  • z238_microtower_workstation_firmware
  • z240_tower_workstation
  • elitebook_folio_g1
  • zbook_17_g3_firmware
  • elitebook_828_g3_firmware
  • probook_640_g2_firmware
  • z2_mini_g3_workstation_firmware
  • zbook_15_g3_firmware
CWE
CWE-269

Improper Privilege Management