CVE-2022-37020

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-37020

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

P

otential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

References
Link Resource
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 Vendor Advisory
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z2_mini_g3_workstation:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:hp:z238_microtower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z238_microtower_workstation:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_small_form_factor_workstation:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:hp:z240_tower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_tower_workstation:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*
History

13 Feb 2026, 15:36

Type Values Removed Values Added
First Time Hp probook 650 G2
Hp elitedesk 800 35w G2 Desktop Mini Pc
Hp elitebook 840 G3
Hp elitebook 848 G3 Firmware
Hp elitedesk 800 65w G2 Desktop Mini Pc Firmware
Hp elitedesk 800 65w G2 Desktop Mini Pc
Hp mp9 G2 Retail System
Hp zbook 17 G3 Firmware
Hp z238 Microtower Workstation Firmware
Hp elite Slice For Meeting Rooms Firmware
Hp probook 650 G2 Firmware
Hp z240 Small Form Factor Workstation
Hp probook 446 G3 Firmware
Hp elitebook Folio G1 Firmware
Hp z238 Microtower Workstation
Hp elitebook 848 G3
Hp rp9 G1 Retail System Firmware
Hp elite Slice
Hp zbook Studio G3 Firmware
Hp elitebook 1040 G3 Firmware
Hp elitedesk 800 35w G2 Desktop Mini Pc Firmware
Hp elite Slice For Meeting Rooms
Hp elitebook 850 G3 Firmware
Hp
Hp elitebook 820 G3 Firmware
Hp z240 Tower Workstation Firmware
Hp probook 640 G2
Hp zbook 15u G3 Firmware
Hp elite Slice Firmware
Hp elitebook 828 G3
Hp probook 446 G3
Hp zbook Studio G3
Hp elitebook 828 G3 Firmware
Hp elitebook 850 G3
Hp probook 470 G3
Hp mp9 G2 Retail System Firmware
Hp elitebook 820 G3
Hp probook 440 G3
Hp zbook 17 G3
Hp zbook 15 G3
Hp elitebook 840 G3 Firmware
Hp z2 Mini G3 Workstation Firmware
Hp probook 470 G3 Firmware
Hp z2 Mini G3 Workstation
Hp probook 640 G2 Firmware
Hp z240 Small Form Factor Workstation Firmware
Hp probook 440 G3 Firmware
Hp z240 Tower Workstation
Hp elitebook 1040 G3
Hp rp9 G1 Retail System
Hp elitebook Folio G1
Hp zbook 15u G3
Hp zbook 15 G3 Firmware
References () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 - () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 - Vendor Advisory
CPE cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_tower_workstation:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:z240_tower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:z240_small_form_factor_workstation:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:z238_microtower_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z2_mini_g3_workstation:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z238_microtower_workstation:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*

21 Nov 2024, 07:14

Type Values Removed Values Added
References () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 - () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 -

28 Oct 2024, 19:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.8
CWE CWE-120

11 Jun 2024, 13:54

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-10 23:15

Updated : 2026-02-13 15:36

NVD link : CVE-2022-37020

Mitre link : CVE-2022-37020

CVE.ORG link : CVE-2022-37020

JSON object : View

Products Affected

hp

CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')