CVE-2022-27537

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-01 · updated 2026-06-17
Weakness: CWE-94

Description

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities.

Affected products

HP Dragonfly Folio G3 2-In-1 Firmware: 01.01.03
HP Elite Dragonfly Firmware: 01.21.01
HP Elite Dragonfly G2 Firmware: 01.10.00
HP Elite Dragonfly G3 Firmware: 01.03.01
HP Elite Dragonfly Max Firmware: 01.10.00
HP Elite Folio 2-In-1 Firmware: not_impacted
HP Elite Mini 600 G9 Firmware: 02.05.00
HP Elite Mini 800 G9 Firmware: 02.05.00
HP Elite Sff 600 G9 Firmware: 02.05.01
HP Elite Sff 800 G9 Firmware: 02.05.01
HP Elite Slice Firmware: 2.59
HP Elite Slice G2 Firmware: 2.59
HP Elite Tower 600 G9 Firmware: 02.05.01
HP Elite Tower 680 G9 Firmware: 02.05.01
HP Elite Tower 800 G9 Firmware: 02.05.01
HP Elite Tower 880 G9 Firmware: 02.05.01
HP Elite X2 1012 G1 Firmware: 1.57
HP Elite X2 1012 G2 Firmware: 1.43
HP Elite X2 1013 G3 Firmware: 01.21.01
HP Elite X2 G4 Firmware: 01.21.01
HP Elite X2 G8 Firmware: 01.10.00
HP Elite X360 1040 G9 2-In-1 Firmware: 01.03.01
HP Elite X360 830 G9 2-In-1 Firmware: 01.03.01
HP Elitebook 1030 G1 Firmware: 1.57
HP Elitebook 1040 G3 Firmware: 1.57
HP Elitebook 1040 G4 Firmware: 1.44
HP Elitebook 1040 G9 Firmware: 01.03.01
HP Elitebook 1050 G1 Firmware: 01.22.00
HP Elitebook 630 G9 Firmware: 01.04.00
HP Elitebook 640 G9 Firmware: 01.04.00

References

Get alerted when CVE-2022-27537 or the next vulnerability affects your stack