CVE-2022-31644

Q: What is the severity of CVE-2022-31644?

CVE-2022-31644 has a CVSS score of 7.8 (HIGH). This CVE describes BIOS vulnerabilities in certain HP PC products that could allow attackers to execute arbitrary code, escalate privileges, cause denial of service, or disclose sensitive information. The vulnerability affects HP PC users with specific BIOS versions and requires physical or administrative access to exploit. This is an incorrect authorization vulnerability (CWE-863) in the system BIOS.

7.8 HIGH

📋 TL;DR

This CVE describes BIOS vulnerabilities in certain HP PC products that could allow attackers to execute arbitrary code, escalate privileges, cause denial of service, or disclose sensitive information. The vulnerability affects HP PC users with specific BIOS versions and requires physical or administrative access to exploit. This is an incorrect authorization vulnerability (CWE-863) in the system BIOS.

💻 Affected Systems

Products:

HP PC products with specific BIOS versions

Versions: Multiple BIOS versions across various HP PC models

Operating Systems: All operating systems running on affected hardware

Default Config Vulnerable: ⚠️ Yes

Notes: Specific affected models and BIOS versions are detailed in HP's security bulletin. The vulnerability is in the BIOS firmware itself, affecting all operating systems running on the hardware.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

An attacker with physical or administrative access could gain complete control of the system, bypass all security controls, install persistent malware in firmware, and access sensitive data including encryption keys.

🟠

Likely Case

Malicious insiders or attackers with physical access could escalate privileges, bypass security controls, and potentially maintain persistence through firmware-level compromise.

🟢

If Mitigated

With proper physical security controls and BIOS password protection, the attack surface is significantly reduced, though the vulnerability remains present in the firmware.

🌐 Internet-Facing: LOW - This vulnerability requires physical or administrative access to the system and cannot be exploited remotely over the internet.

🏢 Internal Only: MEDIUM - Internal attackers with physical access or administrative privileges could exploit this vulnerability to compromise systems within the organization.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires physical access or administrative privileges. The vulnerability involves incorrect authorization checks in BIOS functions that could be manipulated by an attacker with access to BIOS/UEFI settings or firmware update mechanisms.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: BIOS updates provided by HP for specific models

Vendor Advisory: https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806

Restart Required: Yes

Instructions:

1. Identify your HP PC model and current BIOS version. 2. Visit HP Support website and search for BIOS updates for your specific model. 3. Download the latest BIOS update from HP's official site. 4. Follow HP's instructions to update the BIOS (typically involves running an executable in Windows or using a USB flash drive). 5. Restart the system as required by the update process.

🔧 Temporary Workarounds

Enable BIOS/UEFI Password

all

Set a strong BIOS/UEFI password to prevent unauthorized access to BIOS settings and firmware update functions.

Physical Security Controls

all

Implement physical security measures to prevent unauthorized physical access to systems, including locked server rooms, cable locks for laptops, and access controls.

🧯 If You Can't Patch

Implement strict physical security controls and limit physical access to affected systems
Enable BIOS/UEFI passwords and secure boot features to reduce attack surface

🔍 How to Verify

Check if Vulnerable:

Check your HP PC model and BIOS version against HP's security bulletin. In Windows, you can check BIOS version via System Information (msinfo32) or Command Prompt (wmic bios get smbiosbiosversion).

Check Version:

wmic bios get smbiosbiosversion (Windows) or dmidecode -s bios-version (Linux)

Verify Fix Applied:

After BIOS update, verify the new BIOS version matches the patched version listed in HP's security advisory. Check that the version has increased from the vulnerable version.

📡 Detection & Monitoring

Log Indicators:

Unexpected BIOS/UEFI configuration changes
Failed BIOS update attempts
Unauthorized physical access logs

Network Indicators:

BIOS updates typically do not generate network traffic unless using network-based update mechanisms

SIEM Query:

Search for events related to BIOS/UEFI configuration changes, firmware updates, or physical security breaches on affected HP systems.

📊 Metadata

CVE ID: CVE-2022-31644

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-863

Published: June 14, 2023

Last Updated: December 30, 2024

🔗 References

https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806 Vendor Advisory
https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806 Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Dragonfly Folio G3 2 In 1 Firmware by Hp

Elite Dragonfly Firmware by Hp

Elite Dragonfly G2 Firmware by Hp

Elite Dragonfly G3 Firmware by Hp

Elite Dragonfly Max Firmware by Hp

Elite Folio 2 In 1 Firmware by Hp

Elite Mini 600 G9 Firmware by Hp

Elite Mini 800 G9 Firmware by Hp

Elite Sff 600 G9 Firmware by Hp

Elite Sff 800 G9 Firmware by Hp

Elite Slice Firmware by Hp

Elite Slice G2 Firmware by Hp

Elite Tower 600 G9 Firmware by Hp

Elite Tower 680 G9 Firmware by Hp

Elite Tower 800 G9 Firmware by Hp

Elite Tower 880 G9 Firmware by Hp

Elite X2 1012 G1 Firmware by Hp

Elite X2 1012 G2 Firmware by Hp

Elite X2 1013 G3 Firmware by Hp

Elite X2 G4 Firmware by Hp

Elite X2 G8 Firmware by Hp

Elite X360 1040 G9 2 In 1 Firmware by Hp

Elite X360 830 G9 2 In 1 Firmware by Hp

Elitebook 1030 G1 Firmware by Hp

Elitebook 1040 G3 Firmware by Hp

Elitebook 1040 G4 Firmware by Hp

Elitebook 1040 G9 Firmware by Hp

Elitebook 1050 G1 Firmware by Hp

Elitebook 630 G9 Firmware by Hp

Elitebook 640 G9 Firmware by Hp

Elitebook 645 G9 Firmware by Hp

Elitebook 650 G9 Firmware by Hp

Elitebook 655 G9 Firmware by Hp

Elitebook 735 G5 Firmware by Hp

Elitebook 735 G6 Firmware by Hp

Elitebook 745 G5 Firmware by Hp

Elitebook 745 G6 Firmware by Hp

Elitebook 755 G5 Firmware by Hp

Elitebook 830 G5 Firmware by Hp

Elitebook 830 G6 Firmware by Hp

Elitebook 830 G7 Firmware by Hp

Elitebook 830 G8 Firmware by Hp

Elitebook 830 G9 Firmware by Hp

Elitebook 835 G7 Firmware by Hp

Elitebook 835 G8 Firmware by Hp

Elitebook 835 G9 Firmware by Hp

Elitebook 836 G5 Firmware by Hp

Elitebook 836 G6 Firmware by Hp

Elitebook 840 Aero G8 Firmware by Hp

Elitebook 840 G5 Firmware by Hp

Elitebook 840 G6 Firmware by Hp

Elitebook 840 G7 Firmware by Hp

Elitebook 840 G8 Firmware by Hp

Elitebook 840 G9 Firmware by Hp

Elitebook 840r G4 Firmware by Hp

Elitebook 845 G7 Firmware by Hp

Elitebook 845 G8 Firmware by Hp

Elitebook 845 G9 Firmware by Hp

Elitebook 846 G5 Firmware by Hp

Elitebook 850 G5 Firmware by Hp

Elitebook 850 G6 Firmware by Hp

Elitebook 850 G7 Firmware by Hp

Elitebook 850 G8 Firmware by Hp

Elitebook 855 G7 Firmware by Hp

Elitebook 855 G8 Firmware by Hp

Elitebook 860 G9 Firmware by Hp

Elitebook 865 G9 Firmware by Hp

Elitebook X360 1030 G3 Firmware by Hp

Elitebook X360 1030 G4 Firmware by Hp

Elitebook X360 1030 G7 Firmware by Hp

Elitebook X360 1030 G8 Firmware by Hp

Elitebook X360 1040 G5 Firmware by Hp

Elitebook X360 1040 G6 Firmware by Hp

Elitebook X360 1040 G7 Firmware by Hp

Elitebook X360 1040 G8 Firmware by Hp

Elitebook X360 830 G5 Firmware by Hp

Elitebook X360 830 G6 Firmware by Hp