What is CVE-2022-37018?

CVE-2022-37018 is a high-severity vulnerability in Hp Elitebook_1030_g1, classified under Incorrect Default Permissions. CVSS score: 8.4/10. Published 2022-12-12.

How severe is CVE-2022-37018?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in Hp Elitebook_1030_g1

CVE-2022-37018

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

EPSS: 0.002 (14.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hp Elitebook_1030_g1
Hp Elitebook_1030_g1_firmware
Hp Elitebook_1040_g3
Hp Elitebook_1040_g3_firmware
Hp Elitebook_1040_g4
Hp Elitebook_1040_g4_firmware
Hp Elitebook_820_g3
Hp Elitebook_820_g3_firmware
Hp Elitebook_820_g4
Hp Elitebook_820_g4_firmware

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

hp-security-alert@hp.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-37018?: CVE-2022-37018 is a high-severity vulnerability in Hp Elitebook_1030_g1, classified under Incorrect Default Permissions. CVSS score: 8.4/10. Published 2022-12-12.
How severe is CVE-2022-37018?: High severity. CVSS v3 base score is 8.4 out of 10.