CVE-2022-37019: HP Elite Slice Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.

Affected products

HP Elite Slice Firmware: before 00.02.64 (fixed in 00.02.64)
HP Elite Slice For Meeting Rooms Firmware: before 00.02.64 (fixed in 00.02.64)
HP Elitebook 1040 g3 Firmware: before 01.62 (fixed in 01.62)
HP Elitebook 820 g3 Firmware: before 01.62 (fixed in 01.62)
HP Elitebook 828 g3 Firmware: before 01.62 (fixed in 01.62)
HP Elitebook 840 g3 Firmware: before 01.62 (fixed in 01.62)
HP Elitebook 848 g3 Firmware: before 01.62 (fixed in 01.62)
HP Elitebook 850 g3 Firmware: before 01.62 (fixed in 01.62)
HP Elitebook Folio g1 Firmware: before 01.62 (fixed in 01.62)
HP Elitedesk 800 35w g2 Desktop Mini Pc Firmware: before 00.02.63 (fixed in 00.02.63)
HP Elitedesk 800 65w g2 Desktop Mini Pc Firmware: before 00.02.63 (fixed in 00.02.63)
HP MP9 g2 Retail System Firmware: before 02.63 (fixed in 02.63)
HP Probook 440 g3 Firmware: before 1.62 (fixed in 1.62)
HP Probook 446 g3 Firmware: before 1.62 (fixed in 1.62)
HP Probook 470 g3 Firmware: before 1.62 (fixed in 1.62)
HP Probook 640 g2 Firmware: before 1.62 (fixed in 1.62)
HP Probook 650 g2 Firmware: before 1.62 (fixed in 1.62)
HP RP9 g1 Retail System Firmware: before 02.64 (fixed in 02.64)
HP z238 Microtower Workstation Firmware: before 01.91 (fixed in 01.91)
HP z240 Small Form Factor Workstation Firmware: before 01.91 (fixed in 01.91)
HP z240 Tower Workstation Firmware: before 01.91 (fixed in 01.91)
HP z2 Mini g3 Workstation Firmware: before 01.91 (fixed in 01.91)
HP Zbook 15 g3 Firmware: before 1.62 (fixed in 1.62)
HP Zbook 15u g3 Firmware: before 1.62 (fixed in 1.62)
HP Zbook 17 g3 Firmware: before 1.62 (fixed in 1.62)
and 1 more

Published 2024-06-10. Last modified 2026-06-17.