CVE-2022-31645

high-risk
Published 2023-06-14

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Do I need to act?

-
0.13% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (20)

Dragonfly Folio G3 2-In-1 Firmware
Elite Dragonfly G3 Firmware
Elite Folio 2-In-1 Firmware
Elite X2 1012 G1 Firmware
Elite X2 G8 Firmware
Elite X360 1040 G9 2-In-1 Firmware
Elite X360 830 G9 2-In-1 Firmware
Elitebook 1030 G1 Firmware
Elitebook 1040 G9 Firmware
Elitebook 1040 G3 Firmware
Elitebook 630 G9 Firmware
Elitebook 640 G9 Firmware

Affected Vendors

Hp

References (2)

Vendor Advisory https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
Vendor Advisory https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
58
/ 100
high-risk
Severity 24/34 · High
Exploitability 1/34 · Minimal
Exposure 33/34 · Critical