ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-37018

—
CVSS 3.1
8.4 high
EPSS
<1%p16
Published
()
Modified
Description

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

Vendors
hp
Products
z1 g3 firmware, z2 mini g3 firmware, z238 microtower firmware, z240 sff firmware, z240 tower firmware, engage one aio system firmware, mp9 g2 retail system firmware, rp9 g1 retail system firmware, elite slice firmware, elitedesk 800 35w g2 desktop mini pc firmware, elitedesk 800 35w g3 desktop mini pc firmware, elitedesk 800 65w g2 desktop mini pc firmware
Weakness
CWE-276
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.