CVE-2022-37018

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution

High · published November 21, 2022

CVSS v3.1
8.4
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.7th percentile
Published
2022-11-21T21:02Z
EPSS history
Timeline
  • 21 NOV 21:02Z
    A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution
    cvelistv5