CVE-2022-37018
A potential vulnerability has been identified in the system BIOS for certain HP PC products which...
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
- Record
CVE-2022-37018- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-276
- Updated
- 2026-11-02
CVE List
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
- Record
CVE-2022-37018- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-276
- Updated
- 2026-11-02
EUVDEUVD-2022-39675
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
- Record
EUVD-2022-39675- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vv23-8mw3-7r7r
A potential vulnerability has been identified in the system BIOS for certain HP PC products which...
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
- Record
GHSA-vv23-8mw3-7r7r- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-276
- Updated
- 2026-11-02
Affected products
- hp elite slice firmware
- hp elite x2 1012 g1 firmware
- hp elite x2 1012 g2 firmware
- hp elitebook 1030 g1 firmware
- hp elitebook 1040 g3 firmware
- hp elitebook 1040 g4 firmware
- hp elitebook 820 g3 firmware
- hp elitebook 820 g4 firmware
- hp elitebook 828 g3 firmware
- hp elitebook 828 g4 firmware
- hp elitebook 840 g3 firmware
- hp elitebook 840 g4 firmware
Show 64 moreShow less
- hp elitebook 848 g3 firmware
- hp elitebook 848 g4 firmware
- hp elitebook 850 g3 firmware
- hp elitebook 850 g4 firmware
- hp elitebook folio g1 firmware
- hp elitebook x360 1020 g2 firmware
- hp elitebook x360 1030 g2 firmware
- hp elitedesk 800 35w g2 desktop mini pc firmware
- hp elitedesk 800 35w g3 desktop mini pc firmware
- hp elitedesk 800 65w g2 desktop mini pc firmware
- hp elitedesk 800 65w g3 desktop mini pc firmware
- hp elitedesk 800 g2 sff firmware
- hp eliteone 800 g2 aio firmware
- hp eliteone 800 g3 firmware
- hp engage one aio system firmware
- hp mp9 g2 retail system firmware
- hp pro x2 612 g2 firmware
- hp probook 11 g2 firmware
- hp probook 430 g4 firmware
- hp probook 440 g3 firmware
- hp probook 440 g4 firmware
- hp probook 446 g3 firmware
- hp probook 450 g4 firmware
- hp probook 470 g3 firmware
- hp probook 470 g4 firmware
- hp probook 640 g2 firmware
- hp probook 640 g3 firmware
- hp probook 650 g2 firmware
- hp probook 650 g3 firmware
- hp probook x360 11 g2 firmware
- hp prodesk 400 g3 dm firmware
- hp prodesk 400 g4 microtower firmware
- hp prodesk 400 g4 sff firmware
- hp prodesk 480 g4 microtower pc firmware
- hp prodesk 600 g2 dm firmware
- hp prodesk 600 g2 microtower pc firmware
- hp prodesk 600 g2 sff firmware
- hp prodesk 600 g3 desktop mini firmware
- hp prodesk 600 g3 microtower pc firmware
- hp prodesk 600 g3 sff firmware
- hp prodesk 680 g2 microtower pc firmware
- hp prodesk 680 g3 microtower pc firmware
- hp proone 400 g2 aio firmware
- hp proone 400 g3 aio firmware
- hp proone 480 g3 firmware
- hp proone 600 g2 aio firmware
- hp proone 600 g3 firmware
- hp rp9 g1 retail system firmware
- hp z1 g3 firmware
- hp z238 microtower firmware
- hp z240 sff firmware
- hp z240 tower firmware
- hp z2 mini g3 firmware
- hp zbook 14u g4 firmware
- hp zbook 15 g3 firmware
- hp zbook 15 g4 firmware
- hp zbook 15u g3 firmware
- hp zbook 15u g4 firmware
- hp zbook 17 g3 firmware
- hp zbook 17 g4 firmware
- hp zbook studio g3 firmware
- hp zbook studio g4 firmware
- hp zbook studio x2 g4 firmware
- hp inc. pc bios
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-37018 is a high vulnerability (CVSS 8.4) in Hp Elite Slice Firmware, published November 21, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 15th percentile. No source names a fixed version.