Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-37020 Details

Description

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:6.8 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943	CVE	Vendor Advisory
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	CISA-ADP

Affected Products

Product	Versions
hp elite slice firmware	< 00.02.64
CPE cpe:2.3:o:hp:elite_slice_firmware:::::::: Remediation No remediation found in references.
hp elite slice	All versions
CPE cpe:2.3:h:hp:elite_slice:-:::::::* Remediation No remediation found in references.
hp elite slice for meeting rooms firmware	< 00.02.64
CPE cpe:2.3:o:hp:elite_slice_for_meeting_rooms_firmware:::::::: Remediation No remediation found in references.
hp elite slice for meeting rooms	All versions
CPE cpe:2.3:h:hp:elite_slice_for_meeting_rooms:-:::::::* Remediation No remediation found in references.
hp elitebook 1040 g3 firmware	< 01.62
CPE cpe:2.3:o:hp:elitebook_1040_g3_firmware:::::::: Remediation No remediation found in references.
hp elitebook 1040 g3	All versions
CPE cpe:2.3:h:hp:elitebook_1040_g3:-:::::::* Remediation No remediation found in references.
hp elitebook 820 g3 firmware	< 01.62
CPE cpe:2.3:o:hp:elitebook_820_g3_firmware:::::::: Remediation No remediation found in references.
hp elitebook 820 g3	All versions
CPE cpe:2.3:h:hp:elitebook_820_g3:-:::::::* Remediation No remediation found in references.
hp elitebook 828 g3 firmware	< 01.62
CPE cpe:2.3:o:hp:elitebook_828_g3_firmware:::::::: Remediation No remediation found in references.
hp elitebook 828 g3	All versions
CPE cpe:2.3:h:hp:elitebook_828_g3:-:::::::* Remediation No remediation found in references.
hp elitebook 840 g3 firmware	< 01.62
CPE cpe:2.3:o:hp:elitebook_840_g3_firmware:::::::: Remediation No remediation found in references.
hp elitebook 840 g3	All versions
CPE cpe:2.3:h:hp:elitebook_840_g3:-:::::::* Remediation No remediation found in references.
hp elitebook 848 g3 firmware	< 01.62
CPE cpe:2.3:o:hp:elitebook_848_g3_firmware:::::::: Remediation No remediation found in references.
hp elitebook 848 g3	All versions
CPE cpe:2.3:h:hp:elitebook_848_g3:-:::::::* Remediation No remediation found in references.
hp elitebook 850 g3 firmware	< 01.62
CPE cpe:2.3:o:hp:elitebook_850_g3_firmware:::::::: Remediation No remediation found in references.
hp elitebook 850 g3	All versions
CPE cpe:2.3:h:hp:elitebook_850_g3:-:::::::* Remediation No remediation found in references.
hp elitebook folio g1 firmware	< 01.62
CPE cpe:2.3:o:hp:elitebook_folio_g1_firmware:::::::: Remediation No remediation found in references.
hp elitebook folio g1	All versions
CPE cpe:2.3:h:hp:elitebook_folio_g1:-:::::::* Remediation No remediation found in references.
hp elitedesk 800 35w g2 desktop mini pc firmware	< 00.02.63
CPE cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:::::::: Remediation No remediation found in references.
hp elitedesk 800 35w g2 desktop mini pc	All versions
CPE cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:::::::* Remediation No remediation found in references.
hp elitedesk 800 65w g2 desktop mini pc firmware	< 00.02.63
CPE cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:::::::: Remediation No remediation found in references.
hp elitedesk 800 65w g2 desktop mini pc	All versions
CPE cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:::::::* Remediation No remediation found in references.
hp mp9 g2 retail system firmware	< 02.63
CPE cpe:2.3:o:hp:mp9_g2_retail_system_firmware:::::::: Remediation No remediation found in references.
hp mp9 g2 retail system	All versions
CPE cpe:2.3:h:hp:mp9_g2_retail_system:-:::::::* Remediation No remediation found in references.
hp probook 440 g3 firmware	< 1.62
CPE cpe:2.3:o:hp:probook_440_g3_firmware:::::::: Remediation No remediation found in references.
hp probook 440 g3	All versions
CPE cpe:2.3:h:hp:probook_440_g3:-:::::::* Remediation No remediation found in references.
hp probook 446 g3 firmware	< 1.62
CPE cpe:2.3:o:hp:probook_446_g3_firmware:::::::: Remediation No remediation found in references.
hp probook 446 g3	All versions
CPE cpe:2.3:h:hp:probook_446_g3:-:::::::* Remediation No remediation found in references.
hp probook 470 g3 firmware	< 1.62
CPE cpe:2.3:o:hp:probook_470_g3_firmware:::::::: Remediation No remediation found in references.
hp probook 470 g3	All versions
CPE cpe:2.3:h:hp:probook_470_g3:-:::::::* Remediation No remediation found in references.
hp probook 640 g2 firmware	< 1.62
CPE cpe:2.3:o:hp:probook_640_g2_firmware:::::::: Remediation No remediation found in references.
hp probook 640 g2	All versions
CPE cpe:2.3:h:hp:probook_640_g2:-:::::::* Remediation No remediation found in references.
hp probook 650 g2 firmware	< 1.62
CPE cpe:2.3:o:hp:probook_650_g2_firmware:::::::: Remediation No remediation found in references.
hp probook 650 g2	All versions
CPE cpe:2.3:h:hp:probook_650_g2:-:::::::* Remediation No remediation found in references.
hp rp9 g1 retail system firmware	< 02.64
CPE cpe:2.3:o:hp:rp9_g1_retail_system_firmware:::::::: Remediation No remediation found in references.
hp rp9 g1 retail system	All versions
CPE cpe:2.3:h:hp:rp9_g1_retail_system:-:::::::* Remediation No remediation found in references.
hp z2 mini g3 workstation firmware	< 01.91
CPE cpe:2.3:o:hp:z2_mini_g3_workstation_firmware:::::::: Remediation No remediation found in references.
hp z2 mini g3 workstation	All versions
CPE cpe:2.3:h:hp:z2_mini_g3_workstation:-:::::::* Remediation No remediation found in references.
hp z238 microtower workstation firmware	< 01.91
CPE cpe:2.3:o:hp:z238_microtower_workstation_firmware:::::::: Remediation No remediation found in references.
hp z238 microtower workstation	All versions
CPE cpe:2.3:h:hp:z238_microtower_workstation:-:::::::* Remediation No remediation found in references.
hp z240 small form factor workstation firmware	< 01.91
CPE cpe:2.3:o:hp:z240_small_form_factor_workstation_firmware:::::::: Remediation No remediation found in references.
hp z240 small form factor workstation	All versions
CPE cpe:2.3:h:hp:z240_small_form_factor_workstation:-:::::::* Remediation No remediation found in references.
hp z240 tower workstation firmware	< 01.91
CPE cpe:2.3:o:hp:z240_tower_workstation_firmware:::::::: Remediation No remediation found in references.
hp z240 tower workstation	All versions
CPE cpe:2.3:h:hp:z240_tower_workstation:-:::::::* Remediation No remediation found in references.
hp zbook 15 g3 firmware	< 1.62
CPE cpe:2.3:o:hp:zbook_15_g3_firmware:::::::: Remediation No remediation found in references.
hp zbook 15 g3	All versions
CPE cpe:2.3:h:hp:zbook_15_g3:-:::::::* Remediation No remediation found in references.
hp zbook 15u g3 firmware	< 1.62
CPE cpe:2.3:o:hp:zbook_15u_g3_firmware:::::::: Remediation No remediation found in references.
hp zbook 15u g3	All versions
CPE cpe:2.3:h:hp:zbook_15u_g3:-:::::::* Remediation No remediation found in references.
hp zbook 17 g3 firmware	< 1.62
CPE cpe:2.3:o:hp:zbook_17_g3_firmware:::::::: Remediation No remediation found in references.
hp zbook 17 g3	All versions
CPE cpe:2.3:h:hp:zbook_17_g3:-:::::::* Remediation No remediation found in references.
hp zbook studio g3 firmware	< 1.62
CPE cpe:2.3:o:hp:zbook_studio_g3_firmware:::::::: Remediation No remediation found in references.
hp zbook studio g3	All versions
CPE cpe:2.3:h:hp:zbook_studio_g3:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Feb 13, 2026	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Oct 28, 2024	CVE Modified	CISA-ADP
Jun 10, 2024	New CVE Received	[email protected]

CVE-2022-37020 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation