CVE-2022-37019

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-37019
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943
https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943
Configurations

No configuration.

History

27 Mar 2025, 20:15

Type Values Removed Values Added
CWE CWE-269

21 Nov 2024, 07:14

Type Values Removed Values Added
References () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 - () https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943 -

03 Jul 2024, 01:38

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.8

11 Jun 2024, 13:54

Type Values Removed Values Added
Summary
  • (es) Se han identificado posibles vulnerabilidades en el BIOS del sistema para ciertos productos de PC HP que pueden permitir la escalada de privilegios y la ejecución de código. HP está lanzando actualizaciones de firmware para mitigar las posibles vulnerabilidades.

10 Jun 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-10 23:15

Updated : 2025-03-27 20:15

NVD link : CVE-2022-37019

Mitre link : CVE-2022-37019

CVE.ORG link : CVE-2022-37019

JSON object : View

Products Affected

No product.

CWE
CWE-269

Improper Privilege Management