8.4
HIGH
CVE-2022-37018
HP BIOS Privilege Escalation Vulnerability
Description

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

INFO

Published Date :

Dec. 12, 2022, 1:15 p.m.

Last Modified :

Nov. 21, 2024, 7:14 a.m.

Source :

[email protected]

Remotely Exploitable :

No

Impact Score :

5.9

Exploitability Score :

2.5
Affected Products

The following products are affected by CVE-2022-37018 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Hp elite_slice_firmware
2 Hp elite_x2_1012_g1_firmware
3 Hp elitebook_1030_g1_firmware
4 Hp elitebook_820_g3_firmware
5 Hp elitebook_828_g3_firmware
6 Hp elitebook_840_g3_firmware
7 Hp elitebook_848_g3_firmware
8 Hp elitebook_850_g3_firmware
9 Hp elitebook_folio_g1_firmware
10 Hp elitedesk_800_g2_sff_firmware
11 Hp eliteone_800_g2_aio_firmware
12 Hp mp9_g2_retail_system_firmware
13 Hp probook_11_g2_firmware
14 Hp probook_440_g3_firmware
15 Hp probook_470_g3_firmware
16 Hp probook_640_g2_firmware
17 Hp probook_650_g2_firmware
18 Hp prodesk_600_g2_dm_firmware
19 Hp prodesk_600_g2_sff_firmware
20 Hp proone_400_g2_aio_firmware
21 Hp proone_600_g2_aio_firmware
22 Hp zbook_15_g3_firmware
23 Hp zbook_15u_g3_firmware
24 Hp zbook_17_g3_firmware
25 Hp zbook_studio_g3_firmware
26 Hp z1_g3_firmware
27 Hp z2_mini_g3_firmware
28 Hp z238_microtower_firmware
29 Hp z240_sff_firmware
30 Hp z240_tower_firmware
31 Hp engage_one_aio_system_firmware
32 Hp rp9_g1_retail_system_firmware
33 Hp elitedesk_800_35w_g2_desktop_mini_pc_firmware
34 Hp elitedesk_800_35w_g3_desktop_mini_pc_firmware
35 Hp elitedesk_800_65w_g2_desktop_mini_pc_firmware
36 Hp elitedesk_800_65w_g3_desktop_mini_pc_firmware
37 Hp eliteone_800_g3_firmware
38 Hp prodesk_400_g3_dm_firmware
39 Hp prodesk_400_g4_microtower_firmware
40 Hp prodesk_400_g4_sff_firmware
41 Hp prodesk_480_g4_microtower_pc_firmware
42 Hp prodesk_600_g2_microtower_pc_firmware
43 Hp prodesk_600_g3_desktop_mini_firmware
44 Hp prodesk_600_g3_microtower_pc_firmware
45 Hp prodesk_600_g3_sff_firmware
46 Hp prodesk_680_g2_microtower_pc_firmware
47 Hp prodesk_680_g3_microtower_pc_firmware
48 Hp proone_400_g3_aio_firmware
49 Hp proone_480_g3_firmware
50 Hp proone_600_g3_firmware
51 Hp elite_x2_1012_g2_firmware
52 Hp elitebook_1040_g3_firmware
53 Hp elitebook_1040_g4_firmware
54 Hp elitebook_820_g4_firmware
55 Hp elitebook_828_g4_firmware
56 Hp elitebook_840_g4_firmware
57 Hp elitebook_848_g4_firmware
58 Hp elitebook_850_g4_firmware
59 Hp elitebook_x360_1020_g2_firmware
60 Hp elitebook_x360_1030_g2_firmware
61 Hp pro_x2_612_g2_firmware
62 Hp probook_430_g4_firmware
63 Hp probook_440_g4_firmware
64 Hp probook_446_g3_firmware
65 Hp probook_450_g4_firmware
66 Hp probook_470_g4_firmware
67 Hp probook_640_g3_firmware
68 Hp probook_650_g3_firmware
69 Hp probook_x360_11_g2_firmware
70 Hp zbook_14u_g4_firmware
71 Hp zbook_15_g4_firmware
72 Hp zbook_15u_g4_firmware
73 Hp zbook_17_g4_firmware
74 Hp zbook_studio_g4_firmware
75 Hp zbook_studio_x2_g4_firmware
76 Hp zbook_15_g3
77 Hp zbook_15u_g3
78 Hp zbook_17_g3
79 Hp mp9_g2_retail_system
80 Hp elitebook_820_g3
81 Hp elitebook_840_g3
82 Hp elitebook_850_g3
83 Hp zbook_studio_g3
84 Hp elite_x2_1012_g1
85 Hp elitebook_1030_g1
86 Hp elitebook_828_g3
87 Hp elitebook_848_g3
88 Hp elitebook_folio_g1
89 Hp probook_440_g3
90 Hp probook_446_g3
91 Hp probook_470_g3
92 Hp probook_640_g2
93 Hp probook_650_g2
94 Hp elite_slice
95 Hp elitedesk_800_g2_sff
96 Hp eliteone_800_g2_aio
97 Hp probook_11_g2
98 Hp prodesk_600_g2_dm
99 Hp prodesk_600_g2_sff
100 Hp proone_400_g2_aio
101 Hp proone_600_g2_aio
102 Hp z1_g3
103 Hp z2_mini_g3
104 Hp z238_microtower
105 Hp z240_sff
106 Hp z240_tower
107 Hp elite_x2_1012_g2
108 Hp elitebook_1040_g4
109 Hp elitebook_x360_1020_g2
110 Hp elitebook_x360_1030_g2
111 Hp pro_x2_612_g2
112 Hp zbook_studio_g4
113 Hp elitebook_820_g4
114 Hp elitebook_828_g4
115 Hp elitebook_840_g4
116 Hp elitebook_848_g4
117 Hp elitebook_850_g4
118 Hp elitedesk_800_35w_g2_desktop_mini_pc
119 Hp elitedesk_800_35w_g3_desktop_mini_pc
120 Hp elitedesk_800_65w_g2_desktop_mini_pc
121 Hp elitedesk_800_65w_g3_desktop_mini_pc
122 Hp eliteone_800_g3
123 Hp engage_one_aio_system
124 Hp probook_430_g4
125 Hp probook_440_g4
126 Hp probook_450_g4
127 Hp probook_470_g4
128 Hp probook_640_g3
129 Hp probook_650_g3
130 Hp probook_x360_11_g2
131 Hp prodesk_400_g3_dm
132 Hp prodesk_400_g4_microtower
133 Hp prodesk_400_g4_sff
134 Hp prodesk_480_g4_microtower_pc
135 Hp prodesk_600_g2_microtower_pc
136 Hp prodesk_600_g3_desktop_mini
137 Hp prodesk_600_g3_microtower_pc
138 Hp prodesk_600_g3_sff
139 Hp prodesk_680_g2_microtower_pc
140 Hp prodesk_680_g3_microtower_pc
141 Hp proone_480_g3
142 Hp proone_600_g3
143 Hp zbook_14u_g4
144 Hp zbook_15_g4
145 Hp zbook_15u_g4
146 Hp zbook_17_g4
147 Hp rp9_g1_retail_system
148 Hp proone_400_g3_aio
149 Hp elitebook_1040_g3
150 Hp zbook_studio_x2_g4
: Total Affected Vendor : 1 | Products : 150
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2022-37018.

URL Resource
https://support.hp.com/us-en/document/ish_7191946-7191970-16/hpsbhf03820 Patch Vendor Advisory
https://support.hp.com/us-en/document/ish_7191946-7191970-16/hpsbhf03820 Patch Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2022-37018 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2022-37018 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://support.hp.com/us-en/document/ish_7191946-7191970-16/hpsbhf03820
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Dec. 20, 2022

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://support.hp.com/us-en/document/ish_7191946-7191970-16/hpsbhf03820 No Types Assigned https://support.hp.com/us-en/document/ish_7191946-7191970-16/hpsbhf03820 Patch, Vendor Advisory
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration AND OR *cpe:2.3:o:hp:z1_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.33 OR cpe:2.3:h:hp:z1_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:z2_mini_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.85 OR cpe:2.3:h:hp:z2_mini_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:z238_microtower_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.85 OR cpe:2.3:h:hp:z238_microtower:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:z240_sff_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.85 OR cpe:2.3:h:hp:z240_sff:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:z240_tower_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.85 OR cpe:2.3:h:hp:z240_tower:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:engage_one_aio_system_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:engage_one_aio_system:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:rp9_g1_retail_system_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:rp9_g1_retail_system:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitedesk_800_35w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:elitedesk_800_35w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitedesk_800_35w_g3_desktop_mini_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:elitedesk_800_35w_g3_desktop_mini_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitedesk_800_65w_g2_desktop_mini_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:elitedesk_800_65w_g2_desktop_mini_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitedesk_800_65w_g3_desktop_mini_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:elitedesk_800_65w_g3_desktop_mini_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitedesk_800_g2_sff_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:elitedesk_800_g2_sff:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:eliteone_800_g2_aio_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:eliteone_800_g2_aio:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:eliteone_800_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:eliteone_800_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_400_g3_dm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_400_g3_dm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_400_g4_microtower_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_400_g4_microtower:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_400_g4_sff_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_400_g4_sff:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_480_g4_microtower_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_480_g4_microtower_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_600_g2_dm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:prodesk_600_g2_dm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_600_g2_microtower_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:prodesk_600_g2_microtower_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_600_g2_sff_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:prodesk_600_g2_sff:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_600_g3_desktop_mini_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_600_g3_desktop_mini:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_600_g3_microtower_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_600_g3_microtower_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_600_g3_sff_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_600_g3_sff:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_680_g2_microtower_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:prodesk_680_g2_microtower_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:prodesk_680_g3_microtower_pc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:prodesk_680_g3_microtower_pc:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proone_400_g2_aio_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:proone_400_g2_aio:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proone_400_g3_aio_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:proone_400_g3_aio:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proone_480_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:proone_480_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proone_600_g2_aio_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.59 OR cpe:2.3:h:hp:proone_600_g2_aio:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proone_600_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 02.44 OR cpe:2.3:h:hp:proone_600_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elite_x2_1012_g1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elite_x2_1012_g1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elite_x2_1012_g2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elite_x2_1012_g2:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_1030_g1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_1030_g1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_1040_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_1040_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_1040_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_1040_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_820_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_820_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_828_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_828_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_840_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_840_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_848_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_848_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_850_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_850_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_x360_1020_g2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_x360_1020_g2:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:elitebook_x360_1030_g2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:elitebook_x360_1030_g2:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_11_g2_firmware:*:*:*:*:education:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:probook_11_g2:-:*:*:*:education:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:pro_x2_612_g2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:pro_x2_612_g2:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_430_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:probook_430_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_440_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:probook_440_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_446_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_450_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:probook_450_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_470_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:probook_470_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_640_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:probook_640_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_650_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:probook_650_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:probook_x360_11_g2_firmware:*:*:*:*:education:*:*:* versions up to (excluding) 1.46 OR cpe:2.3:h:hp:probook_x360_11_g2:-:*:*:*:education:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_14u_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:zbook_14u_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_15_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:zbook_15_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_15u_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:zbook_15u_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_17_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:zbook_17_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.58 OR cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_studio_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:zbook_studio_g4:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zbook_studio_x2_g4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 01.44 OR cpe:2.3:h:hp:zbook_studio_x2_g4:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-37018 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-37018 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.06 }} 0.00%

score

0.28434

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: