high8.4
CVE-2022-37018
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution.
Impact
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Z1 G3 Firmware | before 01.33 |
| Hp | Z2 Mini G3 Firmware | before 01.85 |
| Hp | Z238 Microtower Firmware | before 01.85 |
| Hp | Z240 Sff Firmware | before 01.85 |
| Hp | Z240 Tower Firmware | before 01.85 |
| Hp | Engage One Aio System Firmware | before 02.44 |
| Hp | Mp9 G2 Retail System Firmware | before 02.59 |
| Hp | Rp9 G1 Retail System Firmware | before 02.59 |
| Hp | Elite Slice Firmware | before 02.59 |
| Hp | Elitedesk 800 35w G2 Desktop Mini Pc Firmware | before 02.59 |
| Hp | Elitedesk 800 35w G3 Desktop Mini Pc Firmware | before 02.44 |
| Hp | Elitedesk 800 65w G2 Desktop Mini Pc Firmware | before 02.59 |