Medium severity · published Apr 28, 2023
CVE-2022-31643
A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dragonfly Folio G3 Firmware · HP
01.03.01 · source: NVD
ED
Elite Dragonfly G2 Firmware · HP
01.10.00 · source: NVD
ED
Elite Dragonfly G3 Firmware · HP
01.03.01 · source: NVD
ED
Elite Dragonfly Max Firmware · HP
01.10.00 · source: NVD
EM
Elite Mini 600 G9 Firmware · HP
02.05.00 · source: NVD
EX
Elite X2 G8 Firmware · HP
01.10.00 · source: NVD
EX
Elite X360 1040 G9 Firmware · HP
01.03.01 · source: NVD
EX
Elite X360 830 G9 Firmware · HP
01.03.01 · source: NVD
E1
Elitebook 1040 G9 Firmware · HP
01.03.01 · source: NVD
E6
Elitebook 630 G9 Firmware · HP
01.04.00 · source: NVD
E6
Elitebook 640 G9 Firmware · HP
01.04.00 · source: NVD
E6
Elitebook 645 G9 Firmware · HP
01.08.01 · source: NVD