VULNERABILITY INTELLIGENCE
CVE-2022-37018
CVSS score8.4 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2022-12-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-276
Primary references
- hp-security-alert@hp.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory