CVEvulnerability

CVE-2022-31642

7.0 HIGH Published 2023-06-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-367

Description

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Affected configurations

• hp elite dragonfly firmware (< 01.21.01) • hp elite dragonfly g3 firmware (< 01.03.01) • hp elite dragonfly g3 firmware (< 01.01.03) • hp elite x2 1012 g2 firmware (< 1.43) • hp elite x2 1013 g3 firmware (< 01.21.01) • hp elite x2 g4 firmware (< 01.21.01) • hp elite x360 1040 g9 firmware (< 01.03.01) • hp elite x360 830 g9 firmware (< 01.03.01) • hp elitebook 1040 g9 firmware (< 01.03.01) • hp elitebook 1040 g4 firmware (< 1.43) • hp elitebook 1050 g1 firmware (< 01.21.02) • hp elitebook 630 g9 firmware (< 01.04.00) • hp elitebook 640 g9 firmware (< 01.04.00) • hp elitebook 645 g9 firmware (< 01.08.01) • hp elitebook 650 g9 firmware (< 01.04.00) • hp elitebook 655 g9 firmware (< 01.08.01) • hp elitebook 725 g4 firmware (< 1.42) • hp elitebook 735 g5 firmware (< 01.21.01) • hp elitebook 735 g6 firmware (< 01.21.01) • hp elitebook 745 g4 firmware (< 1.42) • hp elitebook 745 g5 firmware (< 01.21.01) • hp elitebook 745 g6 firmware (< 01.21.01) • hp elitebook 755 g4 firmware (< 1.42) • hp elitebook 755 g5 firmware (< 01.21.01) • hp elitebook 820 g4 firmware (< 1.43) • hp elitebook 828 g4 firmware (< 1.43) • hp elitebook 830 g9 firmware (< 01.03.01) • hp elitebook 830 g5 firmware (< 01.21.01) • hp elitebook 830 g6 firmware (< 01.21.01) • hp elitebook 835 g9 firmware (< 01.02.01) • hp elitebook 836 g5 firmware (< 01.21.01) • hp elitebook 836 g6 firmware (< 01.21.01) • hp elitebook 840 g9 firmware (< 01.03.01) • hp elitebook 840 g4 firmware (< 1.43) • hp elitebook 840 g5 firmware (< 01.21.01) • hp elitebook 840 g5 healthcare edition firmware (< 01.21.01) • hp elitebook 840 g6 firmware (< 01.21.01) • hp elitebook 840 g6 healthcare edition firmware (< 01.21.01) • hp elitebook 840r g4 firmware (< 01.21.01) • hp elitebook 845 g9 firmware (< 01.02.01) • hp elitebook 846 g5 firmware (< 01.21.01) • hp elitebook 846 g5 healthcare edition firmware (< 01.21.01) • hp elitebook 846r g4 firmware (< 01.21.01) • hp elitebook 848 g4 firmware (< 1.43) • hp elitebook 850 g4 firmware (< 1.43) • hp elitebook 850 g5 firmware (< 01.21.01) • hp elitebook 850 g6 firmware (< 01.21.01) • hp elitebook 860 g9 firmware (< 01.03.01) • hp elitebook 865 g9 firmware (< 01.02.01) • hp elitebook x360 1020 g2 firmware (< 1.43) • hp elitebook x360 1030 g2 firmware (< 1.43) • hp elitebook x360 1030 g3 firmware (< 01.21.01) • hp elitebook x360 1030 g4 firmware (< 01.21.01) • hp elitebook x360 1040 g5 firmware (< 01.21.01) • hp elitebook x360 1040 g6 firmware (< 01.21.01) • hp elitebook x360 830 g5 firmware (< 01.21.01) • hp elitebook x360 830 g6 firmware (< 01.21.01) • hp pro x2 612 g2 firmware (< 1.43) • hp pro x360 fortis g10 firmware (< 01.03.00) • hp pro x360 fortis g9 firmware (< 01.03.00) … and 238 more

Related

Weakness · CWE (1)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References