CVE-2022-31638

Q: What is the severity of CVE-2022-31638?

CVE-2022-31638 has a CVSS score of 7.8 (HIGH). This CVE describes a time-of-check to time-of-use (TOCTOU) vulnerability in HP PC BIOS firmware that could allow attackers to execute arbitrary code, escalate privileges, cause denial of service, or disclose sensitive information. It affects certain HP PC products with vulnerable BIOS versions. Attackers need local access to exploit this vulnerability.

7.8 HIGH

📋 TL;DR

This CVE describes a time-of-check to time-of-use (TOCTOU) vulnerability in HP PC BIOS firmware that could allow attackers to execute arbitrary code, escalate privileges, cause denial of service, or disclose sensitive information. It affects certain HP PC products with vulnerable BIOS versions. Attackers need local access to exploit this vulnerability.

💻 Affected Systems

Products:

Certain HP PC products (specific models listed in HP advisory)

Versions: Multiple BIOS versions for affected HP PC models

Operating Systems: All operating systems running on affected hardware

Default Config Vulnerable: ⚠️ Yes

Notes: Exact affected models and BIOS versions are detailed in HP's security advisory. Vulnerability exists at BIOS/firmware level, affecting all OS installations on vulnerable hardware.

📦 What is this software?

Eliteone 800 G4 23.8 In Healthcare Edition All In One Business Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G4 23.8 In Healthcare Edition All In One Business Pc Firmware →

Eliteone 800 G4 23.8 Inch Non Touch All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G4 23.8 Inch Non Touch All In One Pc Firmware →

Eliteone 800 G4 23.8 Inch Non Touch Gpu All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G4 23.8 Inch Non Touch Gpu All In One Pc Firmware →

Eliteone 800 G4 23.8 Inch Touch All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G4 23.8 Inch Touch All In One Pc Firmware →

Eliteone 800 G4 23.8 Inch Touch Gpu All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G4 23.8 Inch Touch Gpu All In One Pc Firmware →

Eliteone 800 G5 23.8 In Healthcare Edition All In One Firmware by Hp

View all CVEs affecting Eliteone 800 G5 23.8 In Healthcare Edition All In One Firmware →

Eliteone 800 G5 23.8 Inch All In One Firmware by Hp

View all CVEs affecting Eliteone 800 G5 23.8 Inch All In One Firmware →

Eliteone 800 G6 24 All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G6 24 All In One Pc Firmware →

Eliteone 800 G6 27 All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G6 27 All In One Pc Firmware →

Eliteone 800 G8 24 All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G8 24 All In One Pc Firmware →

Eliteone 800 G8 27 All In One Pc Firmware by Hp

View all CVEs affecting Eliteone 800 G8 27 All In One Pc Firmware →

Eliteone 870 27 Inch G9 All In One Desktop Pc Firmware by Hp

View all CVEs affecting Eliteone 870 27 Inch G9 All In One Desktop Pc Firmware →

Engage Go 10 Mobile System Firmware by Hp

View all CVEs affecting Engage Go 10 Mobile System Firmware →

Engage Go Mobile System Firmware by Hp

View all CVEs affecting Engage Go Mobile System Firmware →

Engage One All In One System Firmware by Hp

View all CVEs affecting Engage One All In One System Firmware →

Mini Conferencing Pc With Zoom Rooms Firmware by Hp

View all CVEs affecting Mini Conferencing Pc With Zoom Rooms Firmware →

Mp9 G4 Retail System Firmware by Hp

View all CVEs affecting Mp9 G4 Retail System Firmware →

Mt21 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt21 Mobile Thin Client Firmware →

Mt22 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt22 Mobile Thin Client Firmware →

Mt31 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt31 Mobile Thin Client Firmware →

Mt32 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt32 Mobile Thin Client Firmware →

Mt42 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt42 Mobile Thin Client Firmware →

Mt43 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt43 Mobile Thin Client Firmware →

Mt44 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt44 Mobile Thin Client Firmware →

Mt45 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt45 Mobile Thin Client Firmware →

Mt46 Mobile Thin Client Firmware by Hp

View all CVEs affecting Mt46 Mobile Thin Client Firmware →

Pro Mini 400 G9 Desktop Pc Firmware by Hp

View all CVEs affecting Pro Mini 400 G9 Desktop Pc Firmware →

Pro Mt440 G3 Mobile Thin Client Firmware by Hp

View all CVEs affecting Pro Mt440 G3 Mobile Thin Client Firmware →

Pro Sff 400 G9 Desktop Pc Firmware by Hp

View all CVEs affecting Pro Sff 400 G9 Desktop Pc Firmware →

Pro Tower 400 G9 Desktop Pc Firmware by Hp

View all CVEs affecting Pro Tower 400 G9 Desktop Pc Firmware →

Pro Tower 480 G9 Desktop Pc Firmware by Hp

View all CVEs affecting Pro Tower 480 G9 Desktop Pc Firmware →

Pro X2 612 G2 Firmware by Hp

View all CVEs affecting Pro X2 612 G2 Firmware →

Pro X360 Fortis 11 Inch G10 Notebook Pc Firmware by Hp

View all CVEs affecting Pro X360 Fortis 11 Inch G10 Notebook Pc Firmware →

Pro X360 Fortis 11 Inch G9 Notebook Pc Firmware by Hp

View all CVEs affecting Pro X360 Fortis 11 Inch G9 Notebook Pc Firmware →

Probook 11 Ee G2 Firmware by Hp

View all CVEs affecting Probook 11 Ee G2 Firmware →

Probook 430 G3 Firmware by Hp

View all CVEs affecting Probook 430 G3 Firmware →

Probook 430 G5 Firmware by Hp

View all CVEs affecting Probook 430 G5 Firmware →

Probook 430 G6 Firmware by Hp

View all CVEs affecting Probook 430 G6 Firmware →

Probook 430 G7 Firmware by Hp

View all CVEs affecting Probook 430 G7 Firmware →

Probook 430 G8 Firmware by Hp

View all CVEs affecting Probook 430 G8 Firmware →

Probook 440 14 Inch G9 Notebook Pc Firmware by Hp

View all CVEs affecting Probook 440 14 Inch G9 Notebook Pc Firmware →

Probook 440 G3 Firmware by Hp

View all CVEs affecting Probook 440 G3 Firmware →

Probook 440 G5 Firmware by Hp

View all CVEs affecting Probook 440 G5 Firmware →

Probook 440 G6 Firmware by Hp

View all CVEs affecting Probook 440 G6 Firmware →

Probook 440 G7 Firmware by Hp

View all CVEs affecting Probook 440 G7 Firmware →

Probook 440 G8 Firmware by Hp

View all CVEs affecting Probook 440 G8 Firmware →

Probook 445 14 Inch G9 Notebook Pc Firmware by Hp

View all CVEs affecting Probook 445 14 Inch G9 Notebook Pc Firmware →

Probook 445 G6 Firmware by Hp

View all CVEs affecting Probook 445 G6 Firmware →

Probook 445 G7 Firmware by Hp

View all CVEs affecting Probook 445 G7 Firmware →

Probook 445 G8 Firmware by Hp

View all CVEs affecting Probook 445 G8 Firmware →

Probook 445r G6 Firmware by Hp

View all CVEs affecting Probook 445r G6 Firmware →

Probook 446 G3 Firmware by Hp

View all CVEs affecting Probook 446 G3 Firmware →

Probook 450 15.6 Inch G9 Notebook Pc Firmware by Hp

View all CVEs affecting Probook 450 15.6 Inch G9 Notebook Pc Firmware →

Probook 450 G3 Firmware by Hp

View all CVEs affecting Probook 450 G3 Firmware →

Probook 450 G5 Firmware by Hp

View all CVEs affecting Probook 450 G5 Firmware →

Probook 450 G6 Firmware by Hp

View all CVEs affecting Probook 450 G6 Firmware →

Probook 450 G7 Firmware by Hp

View all CVEs affecting Probook 450 G7 Firmware →

Probook 450 G8 Firmware by Hp

View all CVEs affecting Probook 450 G8 Firmware →

Probook 455 15.6 Inch G9 Notebook Pc Firmware by Hp

View all CVEs affecting Probook 455 15.6 Inch G9 Notebook Pc Firmware →

Probook 455 G3 Firmware by Hp

View all CVEs affecting Probook 455 G3 Firmware →

Probook 455 G4 Firmware by Hp

View all CVEs affecting Probook 455 G4 Firmware →

Probook 455 G5 Firmware by Hp

View all CVEs affecting Probook 455 G5 Firmware →

Probook 455 G6 Firmware by Hp

View all CVEs affecting Probook 455 G6 Firmware →

Probook 455 G7 Firmware by Hp

View all CVEs affecting Probook 455 G7 Firmware →

Probook 455 G8 Firmware by Hp

View all CVEs affecting Probook 455 G8 Firmware →

Probook 455r G6 Firmware by Hp

View all CVEs affecting Probook 455r G6 Firmware →

Probook 470 G3 Firmware by Hp

View all CVEs affecting Probook 470 G3 Firmware →

Probook 470 G5 Firmware by Hp

View all CVEs affecting Probook 470 G5 Firmware →

Probook 630 G8 Firmware by Hp

View all CVEs affecting Probook 630 G8 Firmware →

Probook 635 Aero G7 Firmware by Hp

View all CVEs affecting Probook 635 Aero G7 Firmware →

Probook 635 Aero G8 Firmware by Hp

View all CVEs affecting Probook 635 Aero G8 Firmware →

Probook 640 G2 Firmware by Hp

View all CVEs affecting Probook 640 G2 Firmware →

Probook 640 G3 Firmware by Hp

View all CVEs affecting Probook 640 G3 Firmware →

Probook 640 G4 Firmware by Hp

View all CVEs affecting Probook 640 G4 Firmware →

Probook 640 G5 Firmware by Hp

View all CVEs affecting Probook 640 G5 Firmware →

Probook 640 G7 Firmware by Hp

View all CVEs affecting Probook 640 G7 Firmware →

Probook 640 G8 Firmware by Hp

View all CVEs affecting Probook 640 G8 Firmware →

Probook 645 G2 Firmware by Hp

View all CVEs affecting Probook 645 G2 Firmware →

Probook 645 G3 Firmware by Hp

View all CVEs affecting Probook 645 G3 Firmware →

Probook 645 G4 Firmware by Hp

View all CVEs affecting Probook 645 G4 Firmware →

Probook 650 G2 Firmware by Hp

View all CVEs affecting Probook 650 G2 Firmware →

Probook 650 G3 Firmware by Hp

View all CVEs affecting Probook 650 G3 Firmware →

Probook 650 G4 Firmware by Hp

View all CVEs affecting Probook 650 G4 Firmware →

Probook 650 G5 Firmware by Hp

View all CVEs affecting Probook 650 G5 Firmware →

Probook 650 G7 Firmware by Hp

View all CVEs affecting Probook 650 G7 Firmware →

Probook 650 G8 Firmware by Hp

View all CVEs affecting Probook 650 G8 Firmware →

Probook 655 G2 Firmware by Hp

View all CVEs affecting Probook 655 G2 Firmware →

Probook 655 G3 Firmware by Hp

View all CVEs affecting Probook 655 G3 Firmware →

Probook Fortis 14 Inch G10 Notebook Pc Firmware by Hp

View all CVEs affecting Probook Fortis 14 Inch G10 Notebook Pc Firmware →

Probook Fortis 14 Inch G9 Notebook Pc Firmware by Hp

View all CVEs affecting Probook Fortis 14 Inch G9 Notebook Pc Firmware →

Probook X360 11 G2 Ee Firmware by Hp

View all CVEs affecting Probook X360 11 G2 Ee Firmware →

Probook X360 11 G3 Ee Firmware by Hp

View all CVEs affecting Probook X360 11 G3 Ee Firmware →

Probook X360 11 G4 Ee Firmware by Hp

View all CVEs affecting Probook X360 11 G4 Ee Firmware →

Probook X360 11 G5 Ee Firmware by Hp

View all CVEs affecting Probook X360 11 G5 Ee Firmware →

Probook X360 11 G6 Ee Firmware by Hp

View all CVEs affecting Probook X360 11 G6 Ee Firmware →

Probook X360 11 G7 Ee Firmware by Hp

View all CVEs affecting Probook X360 11 G7 Ee Firmware →

Probook X360 435 G7 Firmware by Hp

View all CVEs affecting Probook X360 435 G7 Firmware →

Probook X360 435 G8 Notebook Pc Firmware by Hp

View all CVEs affecting Probook X360 435 G8 Notebook Pc Firmware →

Probook X360 440 G1 Firmware by Hp

View all CVEs affecting Probook X360 440 G1 Firmware →

Prodesk 400 G2 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G2 Desktop Mini Pc Firmware →

Prodesk 400 G3 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G3 Desktop Mini Pc Firmware →

Prodesk 400 G4 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G4 Desktop Mini Pc Firmware →

Prodesk 400 G4 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G4 Microtower Pc Firmware →

Prodesk 400 G4 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G4 Small Form Factor Pc Firmware →

Prodesk 400 G5 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G5 Desktop Mini Pc Firmware →

Prodesk 400 G5 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G5 Microtower Pc Firmware →

Prodesk 400 G5 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G5 Small Form Factor Pc Firmware →

Prodesk 400 G6 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G6 Desktop Mini Pc Firmware →

Prodesk 400 G6 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G6 Microtower Pc Firmware →

Prodesk 400 G6 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G6 Small Form Factor Pc Firmware →

Prodesk 400 G7 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G7 Microtower Pc Firmware →

Prodesk 400 G7 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 400 G7 Small Form Factor Pc Firmware →

Prodesk 405 G4 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 405 G4 Desktop Mini Pc Firmware →

Prodesk 405 G4 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 405 G4 Small Form Factor Pc Firmware →

Prodesk 405 G6 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 405 G6 Desktop Mini Pc Firmware →

Prodesk 405 G6 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 405 G6 Small Form Factor Pc Firmware →

Prodesk 405 G8 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 405 G8 Desktop Mini Pc Firmware →

Prodesk 405 G8 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 405 G8 Small Form Factor Pc Firmware →

Prodesk 480 G4 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 480 G4 Microtower Pc Firmware →

Prodesk 480 G5 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 480 G5 Microtower Pc Firmware →

Prodesk 480 G6 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 480 G6 Microtower Pc Firmware →

Prodesk 480 G7 Pci Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 480 G7 Pci Microtower Pc Firmware →

Prodesk 600 G2 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G2 Desktop Mini Pc Firmware →

Prodesk 600 G3 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G3 Desktop Mini Pc Firmware →

Prodesk 600 G3 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G3 Microtower Pc Firmware →

Prodesk 600 G3 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G3 Small Form Factor Pc Firmware →

Prodesk 600 G4 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G4 Desktop Mini Pc Firmware →

Prodesk 600 G4 Microtower Pc \(with Pci Slot\) Firmware by Hp

View all CVEs affecting Prodesk 600 G4 Microtower Pc \(with Pci Slot\) Firmware →

Prodesk 600 G4 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G4 Microtower Pc Firmware →

Prodesk 600 G4 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G4 Small Form Factor Pc Firmware →

Prodesk 600 G5 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G5 Desktop Mini Pc Firmware →

Prodesk 600 G5 Microtower Pc \(with Pci Slot\) Firmware by Hp

View all CVEs affecting Prodesk 600 G5 Microtower Pc \(with Pci Slot\) Firmware →

Prodesk 600 G5 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G5 Microtower Pc Firmware →

Prodesk 600 G5 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G5 Small Form Factor Pc Firmware →

Prodesk 600 G6 Desktop Mini Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G6 Desktop Mini Pc Firmware →

Prodesk 600 G6 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G6 Microtower Pc Firmware →

Prodesk 600 G6 Pci Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G6 Pci Microtower Pc Firmware →

Prodesk 600 G6 Small Form Factor Pc Firmware by Hp

View all CVEs affecting Prodesk 600 G6 Small Form Factor Pc Firmware →

Prodesk 680 G3 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 680 G3 Microtower Pc Firmware →

Prodesk 680 G4 Microtower Pc \(with Pci Slot\) Firmware by Hp

View all CVEs affecting Prodesk 680 G4 Microtower Pc \(with Pci Slot\) Firmware →

Prodesk 680 G4 Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 680 G4 Microtower Pc Firmware →

Prodesk 680 G6 Pci Microtower Pc Firmware by Hp

View all CVEs affecting Prodesk 680 G6 Pci Microtower Pc Firmware →

Proone 400 G2 20 Inch Non Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 400 G2 20 Inch Non Touch All In One Pc Firmware →

Proone 400 G2 20 Inch Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 400 G2 20 Inch Touch All In One Pc Firmware →

Proone 400 G3 20 Inch Non Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 400 G3 20 Inch Non Touch All In One Pc Firmware →

Proone 400 G3 20 Inch Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 400 G3 20 Inch Touch All In One Pc Firmware →

Proone 400 G4 20 Inch Non Touch All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 400 G4 20 Inch Non Touch All In One Business Pc Firmware →

Proone 400 G4 23.8 Inch Non Touch All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 400 G4 23.8 Inch Non Touch All In One Business Pc Firmware →

Proone 400 G5 20 Inch All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 400 G5 20 Inch All In One Business Pc Firmware →

Proone 400 G5 23.8 Inch All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 400 G5 23.8 Inch All In One Business Pc Firmware →

Proone 400 G6 20 All In One Pc Firmware by Hp

View all CVEs affecting Proone 400 G6 20 All In One Pc Firmware →

Proone 400 G6 24 All In One Pc Firmware by Hp

View all CVEs affecting Proone 400 G6 24 All In One Pc Firmware →

Proone 440 23.8 Inch G9 All In One Desktop Pc Firmware by Hp

View all CVEs affecting Proone 440 23.8 Inch G9 All In One Desktop Pc Firmware →

Proone 440 G4 23.8 Inch Non Touch All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 440 G4 23.8 Inch Non Touch All In One Business Pc Firmware →

Proone 440 G5 23.8 In All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 440 G5 23.8 In All In One Business Pc Firmware →

Proone 440 G6 24 All In One Pc Firmware by Hp

View all CVEs affecting Proone 440 G6 24 All In One Pc Firmware →

Proone 480 G3 20 Inch Non Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 480 G3 20 Inch Non Touch All In One Pc Firmware →

Proone 600 G2 21.5 Inch Non Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 600 G2 21.5 Inch Non Touch All In One Pc Firmware →

Proone 600 G2 21.5 Inch Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 600 G2 21.5 Inch Touch All In One Pc Firmware →

Proone 600 G3 21.5 Inch Non Touch All In One Pc Firmware by Hp

View all CVEs affecting Proone 600 G3 21.5 Inch Non Touch All In One Pc Firmware →

Proone 600 G4 21.5 Inch Touch All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 600 G4 21.5 Inch Touch All In One Business Pc Firmware →

Proone 600 G5 21.5 In All In One Business Pc Firmware by Hp

View all CVEs affecting Proone 600 G5 21.5 In All In One Business Pc Firmware →

Proone 600 G6 22 All In One Pc Firmware by Hp

View all CVEs affecting Proone 600 G6 22 All In One Pc Firmware →

Rp9 G1 Retail System Firmware by Hp

View all CVEs affecting Rp9 G1 Retail System Firmware →

Z1 All In One G3 Workstation Firmware by Hp

View all CVEs affecting Z1 All In One G3 Workstation Firmware →

Z1 Entry Tower G5 Firmware by Hp

View all CVEs affecting Z1 Entry Tower G5 Firmware →

Z1 Entry Tower G6 Firmware by Hp

View all CVEs affecting Z1 Entry Tower G6 Firmware →

Z1 G8 Tower Desktop Pc Firmware by Hp

View all CVEs affecting Z1 G8 Tower Desktop Pc Firmware →

Z1 G9 Tower Desktop Pc Firmware by Hp

View all CVEs affecting Z1 G9 Tower Desktop Pc Firmware →

Z2 Mini G3 Workstation Firmware by Hp

View all CVEs affecting Z2 Mini G3 Workstation Firmware →

Z2 Mini G4 Workstation Firmware by Hp

View all CVEs affecting Z2 Mini G4 Workstation Firmware →

Z2 Mini G5 Workstation Firmware by Hp

View all CVEs affecting Z2 Mini G5 Workstation Firmware →

Z2 Mini G9 Workstation Firmware by Hp

View all CVEs affecting Z2 Mini G9 Workstation Firmware →

Z2 Small Form Factor G4 Workstation Firmware by Hp

View all CVEs affecting Z2 Small Form Factor G4 Workstation Firmware →

Z2 Small Form Factor G5 Workstation Firmware by Hp

View all CVEs affecting Z2 Small Form Factor G5 Workstation Firmware →

Z2 Small Form Factor G8 Workstation Firmware by Hp

View all CVEs affecting Z2 Small Form Factor G8 Workstation Firmware →

Z2 Small Form Factor G9 Workstation Firmware by Hp

View all CVEs affecting Z2 Small Form Factor G9 Workstation Firmware →

Z2 Tower G4 Workstation Firmware by Hp

View all CVEs affecting Z2 Tower G4 Workstation Firmware →

Z2 Tower G5 Workstation Firmware by Hp

View all CVEs affecting Z2 Tower G5 Workstation Firmware →

Z2 Tower G8 Workstation Firmware by Hp

View all CVEs affecting Z2 Tower G8 Workstation Firmware →

Z2 Tower G9 Workstation Firmware by Hp

View all CVEs affecting Z2 Tower G9 Workstation Firmware →

Z238 Microtower Workstation Firmware by Hp

View all CVEs affecting Z238 Microtower Workstation Firmware →

Z240 Small Form Factor Workstation Firmware by Hp

View all CVEs affecting Z240 Small Form Factor Workstation Firmware →

Z240 Tower Workstation Firmware by Hp

View all CVEs affecting Z240 Tower Workstation Firmware →

Z4 G4 Workstation \(core X\) Firmware by Hp

View all CVEs affecting Z4 G4 Workstation \(core X\) Firmware →

Z4 G4 Workstation \(xeon W\) Firmware by Hp

View all CVEs affecting Z4 G4 Workstation \(xeon W\) Firmware →

Z440 Workstation Firmware by Hp

View all CVEs affecting Z440 Workstation Firmware →

Z640 Workstation Firmware by Hp

View all CVEs affecting Z640 Workstation Firmware →

Z8 G4 Workstation Firmware by Hp

View all CVEs affecting Z8 G4 Workstation Firmware →

Z840 Workstation Firmware by Hp

View all CVEs affecting Z840 Workstation Firmware →

Zbook 14u G4 Firmware by Hp

View all CVEs affecting Zbook 14u G4 Firmware →

Zbook 14u G5 Firmware by Hp

View all CVEs affecting Zbook 14u G5 Firmware →

Zbook 14u G6 Firmware by Hp

View all CVEs affecting Zbook 14u G6 Firmware →

Zbook 15 G3 Firmware by Hp

View all CVEs affecting Zbook 15 G3 Firmware →

Zbook 15 G4 Firmware by Hp

View all CVEs affecting Zbook 15 G4 Firmware →

Zbook 15 G5 Firmware by Hp

View all CVEs affecting Zbook 15 G5 Firmware →

Zbook 15 G6 Firmware by Hp

View all CVEs affecting Zbook 15 G6 Firmware →

Zbook 15u G3 Firmware by Hp

View all CVEs affecting Zbook 15u G3 Firmware →

Zbook 15u G4 Firmware by Hp

View all CVEs affecting Zbook 15u G4 Firmware →

Zbook 15u G5 Firmware by Hp

View all CVEs affecting Zbook 15u G5 Firmware →

Zbook 15u G6 Firmware by Hp

View all CVEs affecting Zbook 15u G6 Firmware →

Zbook 17 G3 Firmware by Hp

View all CVEs affecting Zbook 17 G3 Firmware →

Zbook 17 G4 Firmware by Hp

View all CVEs affecting Zbook 17 G4 Firmware →

Zbook 17 G5 Firmware by Hp

View all CVEs affecting Zbook 17 G5 Firmware →

Zbook 17 G6 Firmware by Hp

View all CVEs affecting Zbook 17 G6 Firmware →

Zbook Create G7 Firmware by Hp

View all CVEs affecting Zbook Create G7 Firmware →

Zbook Firefly 14 G7 Firmware by Hp

View all CVEs affecting Zbook Firefly 14 G7 Firmware →

Zbook Firefly 14 Inch G8 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Firefly 14 Inch G8 Mobile Workstation Pc Firmware →

Zbook Firefly 14 Inch G9 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Firefly 14 Inch G9 Mobile Workstation Pc Firmware →

Zbook Firefly 15 G7 Firmware by Hp

View all CVEs affecting Zbook Firefly 15 G7 Firmware →

Zbook Firefly 15.6 Inch G8 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Firefly 15.6 Inch G8 Mobile Workstation Pc Firmware →

Zbook Firefly 16 Inch G9 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Firefly 16 Inch G9 Mobile Workstation Pc Firmware →

Zbook Fury 15 G7 Firmware by Hp

View all CVEs affecting Zbook Fury 15 G7 Firmware →

Zbook Fury 15.6 Inch G8 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Fury 15.6 Inch G8 Mobile Workstation Pc Firmware →

Zbook Fury 16 G9 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Fury 16 G9 Mobile Workstation Pc Firmware →

Zbook Fury 17 G7 Firmware by Hp

View all CVEs affecting Zbook Fury 17 G7 Firmware →

Zbook Fury 17.3 Inch G8 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Fury 17.3 Inch G8 Mobile Workstation Pc Firmware →

Zbook Power 15.6 Inch G8 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Power 15.6 Inch G8 Mobile Workstation Pc Firmware →

Zbook Power 15.6 Inch G9 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Power 15.6 Inch G9 Mobile Workstation Pc Firmware →

Zbook Power G7 Firmware by Hp

View all CVEs affecting Zbook Power G7 Firmware →

Zbook Studio 15.6 Inch G8 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Studio 15.6 Inch G8 Mobile Workstation Pc Firmware →

Zbook Studio 16 Inch G9 Mobile Workstation Pc Firmware by Hp

View all CVEs affecting Zbook Studio 16 Inch G9 Mobile Workstation Pc Firmware →

Zbook Studio G3 Firmware by Hp

View all CVEs affecting Zbook Studio G3 Firmware →

Zbook Studio G4 Firmware by Hp

View all CVEs affecting Zbook Studio G4 Firmware →

Zbook Studio G5 Firmware by Hp

View all CVEs affecting Zbook Studio G5 Firmware →

Zbook Studio G7 Firmware by Hp

View all CVEs affecting Zbook Studio G7 Firmware →

Zbook Studio X360 G5 Firmware by Hp

View all CVEs affecting Zbook Studio X360 G5 Firmware →

Zbook X2 G4 Firmware by Hp

View all CVEs affecting Zbook X2 G4 Firmware →

Zcentral 4r Workstation Firmware by Hp

View all CVEs affecting Zcentral 4r Workstation Firmware →

Zhan 66 Pro 13 G2 Firmware by Hp

View all CVEs affecting Zhan 66 Pro 13 G2 Firmware →

Zhan 66 Pro 14 G2 Firmware by Hp

View all CVEs affecting Zhan 66 Pro 14 G2 Firmware →

Zhan 66 Pro 14 G3 Firmware by Hp

View all CVEs affecting Zhan 66 Pro 14 G3 Firmware →

Zhan 66 Pro 14 G4 Notebook Pc Firmware by Hp

View all CVEs affecting Zhan 66 Pro 14 G4 Notebook Pc Firmware →

Zhan 66 Pro 14 Inch G5 Notebook Pc Firmware by Hp

View all CVEs affecting Zhan 66 Pro 14 Inch G5 Notebook Pc Firmware →

Zhan 66 Pro 15 G2 Firmware by Hp

View all CVEs affecting Zhan 66 Pro 15 G2 Firmware →

Zhan 66 Pro 15 G3 Firmware by Hp

View all CVEs affecting Zhan 66 Pro 15 G3 Firmware →

Zhan 66 Pro A 14 G3 Firmware by Hp

View all CVEs affecting Zhan 66 Pro A 14 G3 Firmware →

Zhan 66 Pro A 14 G4 Notebook Pc Firmware by Hp

View all CVEs affecting Zhan 66 Pro A 14 G4 Notebook Pc Firmware →

Zhan 66 Pro A 14 G5 Notebook Pc Firmware by Hp

View all CVEs affecting Zhan 66 Pro A 14 G5 Notebook Pc Firmware →

Zhan 66 Pro G1 Firmware by Hp

View all CVEs affecting Zhan 66 Pro G1 Firmware →

Zhan 66 Pro G3 22 All In One Pc Firmware by Hp

View all CVEs affecting Zhan 66 Pro G3 22 All In One Pc Firmware →

Zhan 66 Pro G3 24 All In One Pc Firmware by Hp

View all CVEs affecting Zhan 66 Pro G3 24 All In One Pc Firmware →

Zhan X 13 G2 Firmware by Hp

View all CVEs affecting Zhan X 13 G2 Firmware →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Full system compromise with persistent BIOS-level malware, complete control over the system, and potential for hardware bricking.

🟠

Likely Case

Local privilege escalation allowing attackers to gain administrative access to the system and potentially install persistent malware.

🟢

If Mitigated

Limited impact due to physical/network access controls preventing local attacker access to vulnerable systems.

🌐 Internet-Facing: LOW - Requires local access to the system, cannot be exploited remotely over the network.

🏢 Internal Only: MEDIUM - Insider threats or compromised internal accounts could exploit this vulnerability on affected systems.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access to the system and knowledge of TOCTOU race condition techniques. No public exploit code has been reported.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: BIOS updates for affected HP PC models

Vendor Advisory: https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814

Restart Required: Yes

Instructions:

1. Visit HP Support website. 2. Identify your specific PC model. 3. Download the latest BIOS update for your model. 4. Run the BIOS update utility. 5. Restart the system when prompted. 6. Verify BIOS version after update.

🔧 Temporary Workarounds

Physical Access Controls

all

Restrict physical access to vulnerable systems to prevent local exploitation

User Account Restrictions

all

Limit local user privileges and implement least privilege principles

🧯 If You Can't Patch

Isolate affected systems from critical networks and sensitive data
Implement strict physical security controls and monitor for unauthorized access

🔍 How to Verify

Check if Vulnerable:

Check BIOS version against HP's advisory for your specific PC model

Check Version:

Windows: wmic bios get smbiosbiosversion | Linux: sudo dmidecode -s bios-version

Verify Fix Applied:

Verify BIOS version has been updated to a version not listed in HP's advisory

📡 Detection & Monitoring

Log Indicators:

BIOS/UEFI firmware modification events
Unauthorized local access attempts
Privilege escalation attempts

Network Indicators:

N/A - Local exploitation only

SIEM Query:

EventID=12 OR EventID=13 (System events) with BIOS/UEFI modification indicators

📊 Metadata

CVE ID: CVE-2022-31638

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE: CWE-367

Published: June 13, 2023

Last Updated: January 3, 2025

🔗 References

https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814 Broken Link,Vendor Advisory
https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814 Broken Link,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Dragonfly Folio 13.5 Inch G3 2 In 1 Notebook Pc Firmware by Hp

Elite Dragonfly 13.5 Inch G3 Notebook Pc Firmware by Hp

Elite Dragonfly Firmware by Hp

Elite Dragonfly G2 Firmware by Hp

Elite Dragonfly Max Firmware by Hp

Elite Mini 600 G9 Desktop Pc Firmware by Hp

Elite Mini 800 G9 Desktop Pc Firmware by Hp

Elite Sff 600 G9 Desktop Pc Firmware by Hp

Elite Sff 800 G9 Desktop Pc Firmware by Hp

Elite Slice Firmware by Hp

Elite Slice For Meeting Rooms Firmware by Hp

Elite Slice G2 Audio Ready With Zoom Rooms Firmware by Hp

Elite Slice G2 Partner Ready With Microsoft Teams Rooms Firmware by Hp

Elite Slice G2 With Intel Unite Firmware by Hp

Elite Slice G2 With Microsoft Teams Rooms Firmware by Hp

Elite Slice G2 With Zoom Rooms Firmware by Hp

Elite Tower 600 G9 Desktop Pc Firmware by Hp

Elite Tower 680 G9 Desktop Pc Firmware by Hp

Elite Tower 800 G9 Desktop Pc Firmware by Hp

Elite Tower 880 G9 Desktop Pc Firmware by Hp

Elite X2 1012 G1 Firmware by Hp

Elite X2 1012 G1 Tablet Firmware by Hp

Elite X2 1012 G1 Tablet With Travel Keyboard Firmware by Hp

Elite X2 1012 G2 Firmware by Hp

Elite X2 1013 G3 Firmware by Hp

Elite X2 G4 Firmware by Hp

Elite X2 G8 Tablet Firmware by Hp

Elite X360 1040 14 Inch G9 2 In 1 Notebook Pc Firmware by Hp

Elite X360 830 13 Inch G9 2 In 1 Notebook Pc Firmware by Hp

Elitebook 1030 G1 Firmware by Hp

Elitebook 1040 14 Inch G9 Notebook Pc Firmware by Hp

Elitebook 1040 G3 Firmware by Hp

Elitebook 1040 G4 Firmware by Hp

Elitebook 1050 G1 Firmware by Hp

Elitebook 630 13 Inch G9 Notebook Pc Firmware by Hp

Elitebook 640 14 Inch G9 Notebook Pc Firmware by Hp

Elitebook 645 14 Inch G9 Notebook Pc Firmware by Hp

Elitebook 650 15.6 Inch G9 Notebook Pc Firmware by Hp

Elitebook 655 15.6 Inch G9 Notebook Pc Firmware by Hp

Elitebook 725 G3 Firmware by Hp

Elitebook 725 G4 Firmware by Hp

Elitebook 735 G5 Firmware by Hp

Elitebook 735 G6 Firmware by Hp

Elitebook 745 G3 Firmware by Hp

Elitebook 745 G4 Firmware by Hp

Elitebook 745 G5 Firmware by Hp

Elitebook 745 G6 Firmware by Hp

Elitebook 755 G3 Firmware by Hp

Elitebook 755 G4 Firmware by Hp

Elitebook 755 G5 Firmware by Hp

Elitebook 820 G3 Firmware by Hp

Elitebook 820 G4 Firmware by Hp

Elitebook 828 G3 Firmware by Hp

Elitebook 828 G4 Firmware by Hp

Elitebook 830 13.3 Inch G9 Notebook Pc Firmware by Hp

Elitebook 830 G5 Firmware by Hp

Elitebook 830 G6 Firmware by Hp

Elitebook 830 G7 Firmware by Hp

Elitebook 830 G8 Firmware by Hp

Elitebook 835 13 Inch G9 Notebook Pc Firmware by Hp

Elitebook 835 G7 Firmware by Hp

Elitebook 835 G8 Firmware by Hp

Elitebook 836 G5 Firmware by Hp

Elitebook 836 G6 Firmware by Hp

Elitebook 840 14 Inch G9 Notebook Pc Firmware by Hp

Elitebook 840 Aero G8 Firmware by Hp

Elitebook 840 G3 Firmware by Hp

Elitebook 840 G4 Firmware by Hp

Elitebook 840 G5 Firmware by Hp

Elitebook 840 G5 Healthcare Edition Firmware by Hp

Elitebook 840 G6 Firmware by Hp

Elitebook 840 G6 Healthcare Edition Firmware by Hp

Elitebook 840 G7 Firmware by Hp

Elitebook 840 G8 Firmware by Hp

Elitebook 840r G4 Firmware by Hp

Elitebook 845 14 Inch G9 Notebook Pc Firmware by Hp

Elitebook 845 G7 Firmware by Hp