What’s Vulnerable › Vulnerabilities
CVE-2022-31646
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-06-14 · updated 2026-06-17
- Weakness: CWE-863
Description
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Affected products
- HP Dragonfly Folio G3 2-In-1 Firmware: 01.01.03
- HP Elite Dragonfly Firmware: 01.21.01
- HP Elite Dragonfly G2 Firmware: 01.10.00
- HP Elite Dragonfly G3 Firmware: 01.03.01
- HP Elite Dragonfly Max Firmware: 01.10.00
- HP Elite Folio 2-In-1 Firmware: not_impacted
- HP Elite Mini 600 G9 Firmware: 02.05.00
- HP Elite Mini 800 G9 Firmware: 02.05.00
- HP Elite Sff 600 G9 Firmware: 02.05.01
- HP Elite Sff 800 G9 Firmware: 02.05.01
- HP Elite Slice Firmware: 2.59
- HP Elite Slice G2 Firmware: 2.59
- HP Elite Tower 600 G9 Firmware: 02.05.01
- HP Elite Tower 680 G9 Firmware: 02.05.01
- HP Elite Tower 800 G9 Firmware: 02.05.01
- HP Elite Tower 880 G9 Firmware: 02.05.01
- HP Elite X2 1012 G1 Firmware: 1.57
- HP Elite X2 1012 G2 Firmware: 1.43
- HP Elite X2 1013 G3 Firmware: 01.21.01
- HP Elite X2 G4 Firmware: 01.21.01
- HP Elite X2 G8 Firmware: 01.10.00
- HP Elite X360 1040 G9 2-In-1 Firmware: 01.03.01
- HP Elite X360 830 G9 2-In-1 Firmware: 01.03.01
- HP Elitebook 1030 G1 Firmware: 1.57
- HP Elitebook 1040 G3 Firmware: 1.57
- HP Elitebook 1040 G4 Firmware: 1.44
- HP Elitebook 1040 G9 Firmware: 01.03.01
- HP Elitebook 1050 G1 Firmware: 01.22.00
- HP Elitebook 630 G9 Firmware: 01.04.00
- HP Elitebook 640 G9 Firmware: 01.04.00
References
- https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
- https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
Get alerted when CVE-2022-31646 or the next vulnerability affects your stack