HP has been notified of potential security vulnerabilities involving improper authentication with the Intel CSME subsystem for certain Intel products. Intel CSME FW versions before 12.0.49, 12.0.55, 13.0.21, and 14.0.11 may allow a privileged user to potentially enable escalation of privilege, denial of service, or information disclosure via local access.
High
HPSBHF03651 Rev. 4
February 11, 2020
October 2, 2020
PC
Escalation of Privilege, Denial of Service, and Information Disclosure.
Reported by: Intel
Reference |
Base Vector |
Base Score |
---|---|---|
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
8.2 |
Learn more about CVSS 3.1 base metrics, which range from 0 to 10.
PSR-2020-0025
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com
INTEL-SA-00307 (in English): CVE-2019-14598; PSR-2020-0025
Intel has released updates to mitigate the potential vulnerability. HP has identified the affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerability. See the affected platforms listed below.
Newer versions might become available and the minimum versions listed below might become obsolete. Check the HP Customer Support - Software and Driver Downloads site to obtain the latest update for your product model.
HP recommends keeping your system up to date with the latest firmware and software.
This bulletin might be updated when new information and/or SoftPaqs are available. Sign up for HP Subscriptions to be notified and receive:
Product support eAlerts
Driver updates
Security Bulletin updates
Find the SoftPaq that resolves the vulnerability of your system.
SoftPaq Status
A status is provided if no SoftPaq is listed for a particular product.
Pending: SoftPaq is in progress.
Under investigation: System under investigation for impact, or the SoftPaq is under investigation for feasibility/availability.
Not available: SoftPaq not available due to technical or logistical constraints.
Check Support Page: The listed SoftPaq has been removed from the download site. SoftPaqs with newer versions may be available on the HP Customer Support - Software and Driver Downloads site.
Identify the affected business desktop PCs.
Product Name |
Component Type |
Updated Version |
SoftPaq # |
SoftPaq Link |
---|---|---|---|---|
HP Desktop Pro |
Firmware |
12.0.45.1509 |
SP101201 |
|
HP Desktop Pro |
Driver |
1914.12.0.1256 |
SP101002 |
|
HP EliteDesk 800 G4 DM |
Firmware |
12.0.49.1534 |
SP101022 |
|
HP EliteDesk 800 G4 DM |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteDesk 800 G4 SFF |
Firmware |
12.0.49.1534 |
SP101149 |
|
HP EliteDesk 800 G4 SFF |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteDesk 800 G4 TWR |
Firmware |
12.0.49.1534 |
SP101149 |
|
HP EliteDesk 800 G4 TWR |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteDesk 800 G4 TWR WKS |
Firmware |
12.0.49.1534 |
SP101149 |
|
HP EliteDesk 800 G4 TWR WKS |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteDesk 800 G5 DM |
Firmware |
12.0.49.1534 |
SP101126 |
|
HP EliteDesk 800 G5 DM |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP EliteDesk 800 G5 SFF |
Firmware |
12.0.49.1534 |
SP101143 |
|
HP EliteDesk 800 G5 SFF |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP EliteDesk 800 G5 TWR |
Firmware |
12.0.49.1534 |
SP101143 |
|
HP EliteDesk 800 G5 TWR |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP EliteDesk 880 G4 TWR |
Firmware |
12.0.49.1534 |
SP101149 |
|
HP EliteDesk 880 G4 TWR |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteDesk 880 G5 TWR |
Firmware |
12.0.49.1534 |
SP101143 |
|
HP EliteDesk 880 G5 TWR |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP EliteOne 1000 G2 All-in-One |
Firmware |
12.0.49.1534 |
SP101065 |
|
HP EliteOne 1000 G2 All-in-One |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteOne 800 G4 All-in-One |
Firmware |
12.0.49.1534 |
SP101183 |
|
HP EliteOne 800 G4 All-in-One |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteOne 800 G4 GPU All-in-One |
Firmware |
12.0.49.1534 |
SP101183 |
|
HP EliteOne 800 G4 GPU All-in-One |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP EliteOne 800 G5 |
Firmware |
12.0.49.1534 |
SP101120 |
|
HP EliteOne 800 G5 |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP ProDesk 400 G4 DM |
Firmware |
12.0.49.1534 |
SP101068 |
|
HP ProDesk 400 G4 DM |
Driver |
1946.12.0.1328 |
SP100990 |
|
HP ProDesk 400 G5 DM |
Firmware |
12.0.49.1534 |
SP101128 |
|
HP ProDesk 400 G5 DM |
Driver |
1946.12.0.1328 |
SP100956 |
|
HP ProDesk 400 G5 MT |
Firmware |
12.0.49.1534 |
SP101151 |
|
HP ProDesk 400 G5 MT |
Driver |
1946.12.0.1328 |
SP100990 |
|
HP ProDesk 400 G5 SFF |
Firmware |
12.0.49.1534 |
SP101153 |
|
HP ProDesk 400 G5 SFF |
Driver |
1946.12.0.1328 |
SP100990 |
|
HP ProDesk 400 G6 MT |
Firmware |
12.0.49.1534 |
SP101145 |
|
HP ProDesk 400 G6 MT |
Driver |
1946.12.0.1328 |
SP100956 |
|
HP ProDesk 400 G6 SFF |
Firmware |
12.0.49.1534 |
SP101148 |
|
HP ProDesk 400 G6 SFF |
Driver |
1946.12.0.1328 |
SP100956 |
|
HP ProDesk 480 G5 MT |
Firmware |
12.0.49.1534 |
SP101151 |
|
HP ProDesk 480 G5 MT |
Driver |
1946.12.0.1328 |
SP100990 |
|
HP ProDesk 480 G6 MT |
Firmware |
12.0.49.1534 |
SP101145 |
|
HP ProDesk 480 G6 MT |
Driver |
1946.12.0.1328 |
SP100956 |
|
HP ProDesk 600 G4 DM |
Firmware |
12.0.49.1534 |
SP101067 |
|
HP ProDesk 600 G4 DM |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProDesk 600 G4 MT |
Firmware |
12.0.49.1534 |
SP101150 |
|
HP ProDesk 600 G4 MT |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProDesk 600 G4 SFF |
Firmware |
12.0.49.1534 |
SP101152 |
|
HP ProDesk 600 G4 SFF |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProDesk 600 G5 DM |
Firmware |
12.0.49.1534 |
SP101127 |
|
HP ProDesk 600 G5 DM |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP ProDesk 600 G5 MT |
Firmware |
12.0.49.1534 |
SP101144 |
|
HP ProDesk 600 G5 MT |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP ProDesk 600 G5 SFF |
Firmware |
12.0.49.1534 |
SP101255 |
|
HP ProDesk 600 G5 SFF |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP ProDesk 680 G4 PCI MT |
Firmware |
12.0.49.1534 |
SP101150 |
|
HP ProDesk 680 G4 PCI MT |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProDesk 680 G4 MT |
Firmware |
12.0.49.1534 |
SP101146 |
|
HP ProDesk 680 G4 MT |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProOne 400 G4 AiO |
Firmware |
12.0.49.1534 |
SP101066 |
|
HP ProOne 400 G4 AiO |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProOne 400 G5 AiO |
Firmware |
12.0.49.1534 |
SP101174 |
|
HP ProOne 400 G5 AiO |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP ProOne 440 G4 AiO |
Firmware |
12.0.49.1534 |
SP101066 |
|
HP ProOne 440 G4 AiO |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProOne 440 G5 AiO |
Firmware |
12.0.49.1534 |
SP101174 |
|
HP ProOne 440 G5 AiO |
Driver |
1946.12.0.1328 |
SP101000 |
|
HP ProOne 600 G4 AiO |
Firmware |
12.0.49.1534 |
SP101066 |
|
HP ProOne 600 G4 AiO |
Driver |
1946.12.0.1328 |
SP100992 |
|
HP ProOne 600 G5 AiO |
Firmware |
12.0.49.1534 |
SP101174 |
|
HP ProOne 600 G5 AiO |
Driver |
1946.12.0.1328 |
SP101000 |
For products in the following table, CSME firmware updates are contained in the BIOS update.
Product Name |
Updated Version |
SoftPaq |
SoftPaq Link |
---|---|---|---|
HP 200 G4 22 All-in-One PC (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP 200 Pro G4 22 All-in-One PC (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP 205 G4 22 All-in-One PC (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP 205 Pro G4 22 All-in-One PC (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP 280 G3 (ROM Family SSID 843F) |
F.43 |
SP106187 |
|
HP 280 G4 (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP 280 G4 (ROM Family SSID 8768) |
F.12 |
SP106059 |
|
HP 280 G4 MT Business PC (ROM Family SSID 843C) |
F.43 |
SP106184 |
|
HP 280 G5 (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP 280 G5 (ROM Family SSID 877E) |
F.10 |
SP105984 |
|
HP 280 Pro G3 (ROM Family SSID 843F) |
F.43 |
SP106187 |
|
HP 280 Pro G4 MT Business PC (ROM Family SSID 843C) |
F.43 |
SP106184 |
|
HP 282 G5 (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP 282 G5 (ROM Family SSID 877E) |
F.10 |
SP105984 |
|
HP 282 Pro G4 MT Business PC (ROM Family SSID 843C) |
F.43 |
SP106184 |
|
HP 288 G5 (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP 288 G5 (ROM Family SSID 877E) |
F.10 |
SP105984 |
|
HP 288 Pro G4 MT Business PC (ROM Family SSID 843C) |
F.43 |
SP106184 |
|
HP 290 G1 (ROM Family SSID 843F) |
F.43 |
SP106187 |
|
HP 290 G2 (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP 290 G2 (ROM Family SSID 8768) |
F.12 |
SP106059 |
|
HP 290 G2 MT Business PC (ROM Family SSID 843C) |
F.43 |
SP106184 |
|
HP 290 G3 (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP 290 G3 (ROM Family SSID 877E) |
F.10 |
SP105984 |
|
HP Desktop Pro G1 MT (ROM Family SSID 843C) |
F.43 |
SP106184 |
|
HP Zhan 86 Pro G2 MT Business PC (ROM Family SSID 843C) |
F.43 |
SP106184 |
|
HP ZHAN 99 Pro G1 MT (ROM Family SSID 843C) |
F.43 |
SP106184 |
Identify the affected business notebook PCs.
Product Name |
Component Type |
Updated Version |
SoftPaq # |
SoftPaq Link |
---|---|---|---|---|
HP Elite x2 G4 |
Firmware |
12.0.49.1534 |
SP101379 |
|
HP Elite x2 G4 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook 1050 G1 |
Firmware |
12.0.49.1534 |
SP101278 |
|
HP EliteBook 1050 G1 |
Driver |
1946.12.0.1328 - A - 1 |
SP101070 |
|
HP EliteBook 830 G6 |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP EliteBook 830 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook 836 G6 |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP EliteBook 836 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook 840 G6 |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP EliteBook 840 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook 840 G6 Healthcare Edition |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP EliteBook 840 G6 Healthcare Edition |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook 846 G6 |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP EliteBook 846 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook 846 G6 Healthcare Edition |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP EliteBook 846 G6 Healthcare Edition |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook 850 G6 |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP EliteBook 850 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook x360 1030 G4 |
Firmware |
12.0.49.1534 |
SP101274 |
|
HP EliteBook x360 1030 G4 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook x360 1040 G6 |
Firmware |
12.0.49.1534 |
SP101318 |
|
HP EliteBook x360 1040 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP EliteBook x360 830 G6 |
Firmware |
12.0.49.1534 |
SP101247 |
|
HP EliteBook x360 830 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP ProBook 430 G6 |
Firmware |
12.0.49.1534 |
SP101220 |
|
HP ProBook 430 G6 |
Driver |
1946.12.0.1328 - A - 1 |
SP101075 |
|
HP ProBook 430 G7 |
Firmware |
14.0.11.1205 |
Check support page |
Check HP Customer Support - Software and Driver Downloads site for latest update |
HP ProBook 430 G7 |
Driver |
1944.14.0.1371 |
SP101231 |
|
HP ProBook 440 G6 |
Firmware |
12.0.49.1534 |
SP101220 |
|
HP ProBook 440 G6 |
Driver |
1946.12.0.1328 - A - 1 |
SP101075 |
|
HP ProBook 440 G7 |
Firmware |
14.0.11.1205 |
Check support page |
Check HP Customer Support - Software and Driver Downloads site for latest update |
HP ProBook 440 G7 |
Driver |
1944.14.0.1371 |
SP101231 |
|
HP ProBook 450 G6 |
Firmware |
12.0.49.1534 |
SP101220 |
|
HP ProBook 450 G6 |
Driver |
1946.12.0.1328 - A - 1 |
SP101075 |
|
HP ProBook 450 G7 |
Firmware |
14.0.11.1205 |
Check support page |
Check HP Customer Support - Software and Driver Downloads site for latest update |
HP ProBook 450 G7 |
Driver |
1944.14.0.1371 |
SP101231 |
|
HP ProBook 640 G5 |
Firmware |
12.0.49.1534 |
SP101246 |
|
HP ProBook 640 G5 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP ProBook 650 G4 |
Firmware |
12.0.49.1534 |
SP101301 |
|
HP ProBook 650 G4 |
Driver |
1946.12.0.1328 - A - 1 |
SP101382 |
|
HP ProBook 650 G5 |
Firmware |
12.0.49.1534 |
SP101246 |
|
HP ProBook 650 G5 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP ZBook 14u G6 |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP ZBook 14u G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP ZBook 15 G5 |
Firmware |
12.0.49.1534 |
SP101276 |
|
HP ZBook 15 G5 |
Driver |
1946.12.0.1328 - A - 1 |
SP101070 |
|
HP ZBook 15 G6 |
Firmware |
12.0.49.1534 |
SP101734 |
|
HP ZBook 15 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP ZBook 15u G6 |
Firmware |
12.0.49.1534 |
SP101245 |
|
HP ZBook 15u G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP ZBook 17 G5 |
Firmware |
12.0.49.1534 |
SP101276 |
|
HP ZBook 17 G5 |
Driver |
1946.12.0.1328 - A - 1 |
SP101070 |
|
HP ZBook 17 G6 |
Firmware |
12.0.49.1534 |
SP101734 |
|
HP ZBook 17 G6 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
|
HP ZBook Studio G5 |
Firmware |
12.0.49.1534 |
SP101277 |
|
HP ZBook Studio G5 |
Driver |
1946.12.0.1328 - A - 1 |
SP101070 |
|
HP ZBook Studio x360 G5 |
Firmware |
12.0.49.1534 |
SP101277 |
|
HP ZBook Studio x360 G5 |
Driver |
1946.12.0.1328 - A - 1 |
SP101070 |
|
HP ZHAN 66 Pro 13 G2 |
Firmware |
12.0.49.1534 |
SP101221 |
|
HP ZHAN 66 Pro 13 G2 |
Driver |
1946.12.0.1328 - A - 1 |
SP101075 |
|
HP ZHAN 66 Pro 14 G2 |
Firmware |
12.0.49.1534 |
SP101221 |
|
HP ZHAN 66 Pro 14 G2 |
Driver |
1946.12.0.1328 - A - 1 |
SP101075 |
|
HP ZHAN 66 Pro 14 G3 |
Firmware |
14.0.11.1205 |
Check support page |
Check HP Customer Support - Software and Driver Downloads site for latest update |
HP ZHAN 66 Pro 14 G3 |
Driver |
1944.14.0.1371 |
SP101231 |
|
HP ZHAN 66 Pro 15 G2 |
Firmware |
12.0.49.1534 |
SP101221 |
|
HP ZHAN 66 Pro 15 G2 |
Driver |
1946.12.0.1328 - A - 1 |
SP101075 |
|
HP ZHAN 66 Pro 15 G3 |
Firmware |
14.0.11.1205 |
Check support page |
Check HP Customer Support - Software and Driver Downloads site for latest update |
HP ZHAN 66 Pro 15 G3 |
Driver |
1944.14.0.1371 |
SP101231 |
|
HP ZHAN X 13 G2 |
Firmware |
12.0.49.1534 |
SP101248 |
|
HP ZHAN X 13 G2 |
Driver |
1946.12.0.1328,W,1 |
SP101055 |
For products in the following table, CSME firmware updates are contained in the BIOS update.
Product Name |
Updated Version |
SoftPaq |
SoftPaq Link |
---|---|---|---|
HP 250 G7 |
F.30 |
SP105678 |
|
HP 256 G7 |
F.30 |
SP105678 |
|
HP 258 G7 |
F.30 |
SP105678 |
|
HP 340 G5 |
F.23 |
SP105977 |
|
HP 340 G7 |
F.21 |
SP105530 |
|
HP 340S G7 |
F.13 |
SP107411 |
|
HP 348 G5 |
F.23 |
SP105977 |
|
HP 348 G7 |
F.21 |
SP105530 |
|
HP Pavilion x360 14-dh1xxx |
F.08 |
SP105823 |
|
HP Pavilion x360 14t-dh100 |
F.08 |
SP105823 |
|
HP Pavilion x360 14m-dh1xxx |
F.08 |
SP105823 |
|
HP Pavilion x360 14q-dh1xxx |
F.08 |
SP105823 |
Identify the affected desktop workstation PCs.
Product Name |
Updated Version |
SoftPaq |
SoftPaq Link |
---|---|---|---|
Z2 SFF G4 Workstation WIN 10 |
12.0.49.1534 |
SP101478 |
|
Z2 SFF G4 Workstation Linux |
12.0.49.1534 |
SP101479 |
|
Z2 TWR G4 Workstation Win 10 |
12.0.49.1534 |
SP101478 |
|
Z2 TWR G4 Workstation Linux |
12.0.49.1534 |
SP101479 |
|
Z2 Mini G4 Workstation Win 10 |
12.0.49.1534 |
SP101478 |
|
Z2 Mini G4 Workstation Linux |
12.0.49.1534 |
SP101479 |
Identify the affected retail point-of-sale systems.
Product Name |
Updated Version |
SoftPaq |
SoftPaq Link |
---|---|---|---|
HP Engage Flex Pro Retail System |
12.0.49.1534 |
SP101069 |
|
HP Engage Flex Pro Retail System |
1946.12.0.1328 |
SP100992 |
|
HP Engage Flex Pro-C Retail System |
12.0.49.1534 |
SP101069 |
|
HP Engage Flex Pro-C Retail System |
1946.12.0.1328 |
SP100992 |
|
HP MP9 G4 |
12.0.49.1534 |
SP101067 |
|
HP MP9 G4 |
1946.12.0.1328 |
SP100992 |
Identify the affected home notebook PCs.
Product Name |
Updated Version |
SoftPaq # |
SoftPaq Link |
---|---|---|---|
HP 14-dq0xxx |
F.13 |
SP107411 |
|
HP 14-dq1xxx |
F.13 |
SP107411 |
|
HP 14s-dq0xxx |
F.13 |
SP107411 |
|
HP 14s-dq1xxx |
F.13 |
SP107411 |
|
HP 14s-dr0xxx |
F.13 |
SP107411 |
|
HP 14s-dr1xxx |
F.13 |
SP107411 |
|
HP 14s-dy0xxx |
F.13 |
SP107411 |
|
HP 14s-dy1xxx |
F.13 |
SP107411 |
|
HP 14s-ef0xxx |
F.08 |
SP105926 |
|
HP 14s-er0xxx |
F.08 |
SP105926 |
|
HP 14s-es0xxx |
F.08 |
SP105926 |
|
HP 14t-dq000 |
F.13 |
SP107411 |
|
HP 14t-dq100 |
F.13 |
SP107411 |
|
HP 15-da0xxx |
F.30 |
SP105678 |
|
HP 15-da1xxx |
F.30 |
SP105678 |
|
HP 15-da2xxx |
F.30 |
SP105678 |
|
HP 15-dw0xxx |
F.31 |
SP107533 |
|
HP 15-dw1xxx |
F.31 |
SP107533 |
|
HP 15-dw2xxx |
F.31 |
SP107533 |
|
HP 15-dy0xxx |
F.13 |
SP107411 |
|
HP 15-dy1xxx |
F.13 |
SP107411 |
|
HP 15g-dr0xxx |
F.30 |
SP105678 |
|
HP 15g-dr1xxx |
F.30 |
SP105678 |
|
HP 15g-dr2xxx |
F.30 |
SP105678 |
|
HP 15q-ds0xxx |
F.30 |
SP105678 |
|
HP 15q-ds1xxx |
F.30 |
SP105678 |
|
HP 15q-ds2xxx |
F.30 |
SP105678 |
|
HP 15s-dr0xxx |
F.31 |
SP107533 |
|
HP 15s-dr1xxx |
F.31 |
SP107533 |
|
HP 15s-dr2xxx |
F.31 |
SP107533 |
|
HP 15s-du0xxx |
F.31 |
SP107533 |
|
HP 15s-du1xxx |
F.31 |
SP107533 |
|
HP 15s-du2xxx |
F.31 |
SP107533 |
|
HP 15s-dy0xxx |
F.31 |
SP107533 |
|
HP 15s-dy1xxx |
F.31 |
SP107533 |
|
HP 15s-dy2xxx |
F.31 |
SP107533 |
|
HP 15s-fq0xxx |
F.13 |
SP107411 |
|
HP 15s-fq1xxx |
F.13 |
SP107411 |
|
HP 15s-fr0xxx |
F.13 |
SP107411 |
|
HP 15s-fr1xxx |
F.13 |
SP107411 |
|
HP 15s-fy0xxx |
F.13 |
SP107411 |
|
HP 15s-fy1xxx |
F.13 |
SP107411 |
|
HP 15t-da100 |
F.30 |
SP105678 |
|
HP 15t-da200 |
F.30 |
SP105678 |
|
HP 15t-dw000 |
F.31 |
SP107533 |
|
HP 15t-dw100 |
F.31 |
SP107533 |
|
HP 15t-dw200 |
F.31 |
SP107533 |
|
HP 15t-dy000 |
F.13 |
SP107411 |
|
HP 15t-dy100 |
F.13 |
SP107411 |
|
HP ENVY 13-aq0xxx |
F.13 |
SP107612 |
|
HP ENVY 13-aq1xxx |
F.11 |
SP105942 |
|
HP ENVY 13-ba0xxx |
F.10 |
SP105533 |
|
HP ENVY 13m-ba0xxx |
F.10 |
SP105533 |
|
HP ENVY 13t-aq000 |
F.13 |
SP107612 |
|
HP ENVY 13t-aq100 |
F.11 |
SP105942 |
|
HP ENVY 13t-ba000 |
F.10 |
SP105533 |
|
HP ENVY 15-ep0xxx |
F.02 |
sp107215 |
|
HP ENVY 15m-ep0xxx |
F.02 |
sp107215 |
|
HP ENVY 15t-ep000 |
F.02 |
sp107215 |
|
HP ENVY 17-ce0xxx |
F.10 |
SP106012 |
|
HP ENVY 17-ce1xxx |
F.07 |
SP107537 |
|
HP ENVY 17-cg0xxx |
F.10 |
SP105532 |
|
HP ENVY 17-cg0xxx |
F.10 |
SP105532 |
|
HP ENVY 17m-ce0xxx |
F.10 |
SP106012 |
|
HP ENVY 17m-ce1xxx |
F.07 |
SP107537 |
|
HP ENVY 17m-cg0xxx |
F.10 |
SP105532 |
|
HP ENVY 17m-cg0xxx |
F.10 |
SP105532 |
|
HP ENVY 17t-ce000 |
F.10 |
SP106012 |
|
HP ENVY 17t-ce100 |
F.07 |
SP107537 |
|
HP ENVY 17t-cg000 |
F.10 |
SP105532 |
|
HP ENVY 17t-cg000 |
F.10 |
SP105532 |
|
HP ENVY x360 15-dr0xxx |
F.12 |
SP105935 |
|
HP ENVY x360 15-dr1xxx |
F.09 |
SP107542 |
|
HP ENVY x360 15-ed0xxx |
F.11 |
SP105534 |
|
HP ENVY x360 15m-dr0xxx |
F.12 |
SP105935 |
|
HP ENVY x360 15m-dr1xxx |
F.09 |
SP107542 |
|
HP ENVY x360 15m-ed0xxx |
F.11 |
SP105534 |
|
HP ENVY x360 15t-dr000 |
F.12 |
SP105935 |
|
HP ENVY x360 15t-dr100 |
F.09 |
SP107542 |
|
HP ENVY x360 15t-ed000 |
F.11 |
SP105534 |
|
HP OMEN 15-dh1xxx |
F.12 |
SP106128 |
|
HP OMEN 15-ek0xxx |
F.05 |
SP107341 |
|
HP OMEN 15t-dh100 |
F.12 |
SP106128 |
|
HP OMEN 17-cb1xxx |
F.12 |
SP106128 |
|
HP OMEN 17t-cb100 |
F.12 |
SP106128 |
|
HP Pavilion 13-an0xxx |
F.10 |
sp105826 |
|
HP Pavilion 13-an1xxx |
F.10 |
sp105826 |
|
HP Pavilion 13t-an000 |
F.10 |
sp105826 |
|
HP Pavilion 13t-an100 |
F.10 |
sp105826 |
|
HP Pavilion Gaming 15-dk1xxx |
F.12 |
SP105989 |
|
HP Pavilion Gaming 15t-dk100 |
F.12 |
SP105989 |
|
HP Pavilion Gaming 16-a0xxx |
F.11 |
SP107430 |
|
HP Pavilion Gaming 16t-a000 |
F.11 |
SP107430 |
|
HP Pavilion Gaming 17-cd1xxx |
F.12 |
SP105989 |
|
HP Pavilion Gaming 17t-cd100 |
F.12 |
SP105989 |
|
HP Pavilion x360 11-ap0xxx |
F.06 |
SP105437 |
|
HP Pavilion x360 11m-ap0xxx |
F.06 |
SP105437 |
|
HP Pavilion x360 11t-ap000 |
F.06 |
SP105437 |
|
HP Pavilion x360 14-ba2xx |
F.15 |
SP105853 |
|
HP Pavilion x360 14-dh0xxx |
F.14 |
SP108918 |
|
HP Pavilion x360 14-dh2xxx |
F.03 |
SP105825 |
|
HP Pavilion x360 14-dw0xxx |
F.17 |
SP107524 |
|
HP Pavilion x360 14m-dh0xxx |
F.14 |
SP108918 |
|
HP Pavilion x360 14m-dw0xxx |
F.17 |
SP107524 |
|
HP Pavilion x360 14q-dh0xxx |
F.14 |
SP108918 |
|
HP Pavilion x360 14q-dw0xxx |
F.17 |
SP107524 |
|
HP Pavilion x360 14t-ba200 |
F.15 |
SP105853 |
|
HP Pavilion x360 14t-dh000 |
F.14 |
SP108918 |
|
HP Pavilion x360 14t-dh200 |
F.03 |
SP105825 |
|
HP Pavilion x360 14t-dw000 |
F.17 |
SP107524 |
|
HP Pavilion x360 15-dq0xxx |
F.11 |
SP109021 |
|
HP Pavilion x360 15-dq1xxx |
F.08 |
SP105822 |
|
HP Pavilion x360 15t-dq000 |
F.11 |
SP109021 |
|
HP Pavilion x360 15t-dq100 |
F.08 |
SP105822 |
|
HP Spectre 13-af1xx |
F.15 |
SP105914 |
|
HP Spectre 13t-af100 |
F.15 |
SP105914 |
|
HP Spectre x360 13-ap0xxx |
F.41 |
sp108734 |
|
HP Spectre x360 13-aw0xxx |
F.15 |
SP107207 |
|
HP Spectre x360 13t-ap000 |
F.41 |
SP108734 |
|
HP Spectre x360 15-df0xxx |
F.42 |
SP108735 |
|
HP Spectre x360 15-df1xxx |
F.23 |
SP108737 |
|
HP Spectre x360 15-eb0xxx |
F.07 |
SP105979 |
|
HP Spectre x360 15t-df000 |
F.42 |
SP108735 |
|
HP Spectre x360 15t-df100 |
F.23 |
SP108737 |
|
HP Spectre x360 15t-eb000 |
F.07 |
SP105979 |
Identify the affected home desktop PCs.
Product Name |
Updated Version |
SoftPaq # |
SoftPaq Link |
---|---|---|---|
HP 190-0xxx (ROM Family SSID 8526) |
F.21 |
SP104195 |
|
HP All-in-One 22-c0xxx (ROM Family SSID 8446) |
F.26 |
SP108811 |
|
HP All-in-One 22-dd0xxx (ROM Family SSID 86EF) |
F.10 |
SP104222 |
|
HP All-in-One 22-dd0xxx (ROM Family SSID 86F7) |
F.10 |
SP104212 |
|
HP All-in-One 22-dd0xxx (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP All-in-One 22-dd0xxx (ROM Family SSID 87A4) |
F.10 |
SP106015 |
|
HP All-in-One 22-df0xxx (ROM Family SSID 86EF) |
F.10 |
SP104222 |
|
HP All-in-One 22-df0xxx (ROM Family SSID 86F7) |
F.10 |
SP104212 |
|
HP All-in-One 22-df0xxx (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP All-in-One 22-df0xxx (ROM Family SSID 87A4) |
F.10 |
SP106015 |
|
HP All-in-One 24-dd0xxx (ROM Family SSID 86EF) |
F.10 |
SP104222 |
|
HP All-in-One 24-dd0xxx (ROM Family SSID 86F7) |
F.10 |
SP104212 |
|
HP All-in-One 24-dd0xxx (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP All-in-One 24-dd0xxx (ROM Family SSID 87A4) |
F.10 |
SP106015 |
|
HP All-in-One 24-df0xxx (ROM Family SSID 86EF) |
F.10 |
SP104222 |
|
HP All-in-One 24-df0xxx (ROM Family SSID 86F7) |
F.10 |
SP104212 |
|
HP All-in-One 24-df0xxx (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP All-in-One 24-df0xxx (ROM Family SSID 87A4) |
F.10 |
SP106015 |
|
HP All-in-One 24-dp0xxx (ROM Family SSID 86F7) |
F.10 |
SP104212 |
|
HP All-in-One 24-dp0xxx (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP All-in-One 24-dp0xxx (ROM Family SSID 87A4) |
F.10 |
SP106015 |
|
HP All-in-One 24-f0xxx (ROM Family SSID 8446) |
F.26 |
SP108811 |
|
HP All-in-One 27-dp0xxx (ROM Family SSID 86F7) |
F.10 |
SP104212 |
|
HP All-in-One 27-dp0xxx (ROM Family SSID 86F8) |
F.11 |
SP104221 |
|
HP All-in-One 27-dp0xxx (ROM Family SSID 87A4) |
F.10 |
SP106015 |
|
HP ENVY 27-b2XX (ROM Family SSID 8419) |
F.75 |
SP106021 |
|
HP ENVY 32-a0xxx (ROM Family SSID 86C6) |
F.15 |
SP104337 |
|
HP ENVY 32-a1xxx (ROM Family SSID 86C7) |
F.10 |
SP105541 |
|
HP ENVY 795-0xxx (ROM Family SSID 844C) |
F.42 |
SP106122 |
|
HP ENVY All-in-One 34-b1xx (ROM Family SSID 844E) |
F.75 |
SP106023 |
|
HP ENVY TE01-0xxx (ROM Family SSID 8653) |
F.20 |
SP106062 |
|
HP ENVY TE01-1xxx (ROM Family SSID 8767) |
F.11 |
SP105981 |
|
HP M01-D0xxx (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP M01-D1xxx (ROM Family SSID 8768) |
F.12 |
SP106059 |
|
HP M01-F0xxx (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP M01-F1xxx (ROM Family SSID 8768) |
F.12 |
SP106059 |
|
HP OMEN 25L Desktop GT11-0xxx (ROM Family SSID 8703) |
F.10 |
SP105667 |
|
HP OMEN 25L Desktop GT11-0xxx (ROM Family SSID 8704) |
F.10 |
SP105668 |
|
HP OMEN 875-0xxx (ROM Family SSID 84FD) |
F.26 |
SP104177 |
|
HP OMEN Obelisk V2 GT10-0xxx (ROM Family SSID 8703) |
F.10 |
SP105667 |
|
HP OMEN Obelisk V2 GT10-0xxx (ROM Family SSID 8704) |
F.10 |
SP105668 |
|
HP Pavilion All-in-One 24-b3XX (ROM Family SSID 8475) |
F.12 |
SP107423 |
|
HP Pavilion All-in-One 24-k0xxx (ROM Family SSID 86ED) |
F.10 |
SP105746 |
|
HP Pavilion All-in-One 24-qc0xxx (ROM Family SSID 86ED) |
F.10 |
SP105746 |
|
HP Pavilion All-in-One 24-r1xx (ROM Family SSID 8448) |
F.18 |
SP107422 |
|
HP Pavilion All-in-One 24-xa0xxx (ROM Family SSID 84EE) |
F.26 |
SP108743 |
|
HP Pavilion All-in-One 27-d0xxx (ROM Family SSID 86ED) |
F.10 |
SP105746 |
|
HP Pavilion All-in-One 27-qa1xx (ROM Family SSID 8448) |
F.18 |
SP107422 |
|
HP Pavilion All-in-One 27-qc0xxx (ROM Family SSID 86ED) |
F.10 |
SP105746 |
|
HP Pavilion All-in-One 27-r1xx (ROM Family SSID 8448) |
F.18 |
SP107422 |
|
HP Pavilion All-in-One 27-xa0xxx (ROM Family SSID 84EE) |
F.26 |
SP108743 |
|
HP Pavilion Desktop 590-a0xxx (ROM Family SSID 843B) |
F.43 |
SP106172 |
|
HP Pavilion Desktop 590-p0xxx (ROM Family SSID 843B) |
F.43 |
SP106172 |
|
HP Pavilion Desktop 595-p0xxx (ROM Family SSID 843B) |
F.43 |
SP106172 |
|
HP Pavilion Gaming 790-0xxx (ROM Family SSID 844C) |
F.42 |
SP106122 |
|
HP Pavilion Gaming Desktop 690-0xxx (ROM Family SSID 843B) |
F.43 |
SP106172 |
|
HP Pavilion Gaming TG01-1xxx (ROM Family SSID 8767) |
F.11 |
SP105981 |
|
HP Pavilion TP01-0xxx (ROM Family SSID 8653) |
F.20 |
SP106062 |
|
HP Pavilion TP01-1xxx (ROM Family SSID 8767) |
F.11 |
SP105981 |
|
HP Slim Desktop 290-a0xxx (ROM Family SSID 843F) |
F.43 |
SP106187 |
|
HP Slim Desktop 290-p0xxx (ROM Family SSID 843F) |
F.43 |
SP106187 |
|
HP Slim S01-aD0xxx (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP Slim S01-aD1xxx (ROM Family SSID 8768) |
F.12 |
SP106059 |
|
HP Slim S01-aF0xxx (ROM Family SSID 86E9) |
F.21 |
SP106193 |
|
HP Slim S01-aF1xxx (ROM Family SSID 8768) |
F.12 |
SP106059 |
|
HP VR backpack G2 (ROM Family SSID 8590) |
F.18 |
SP108802 |
|
OMEN by HP 873-0xxx (ROM Family SSID 86D2) |
F.09 |
SP105783 |
|
OMEN by HP Obelisk 875-1xxx (ROM Family SSID 8509) |
F.31 |
SP105862 |
This document has been revised according to the information below.
Version |
Description |
Date |
---|---|---|
4 |
Updated information in Resolution section, and SoftPaq information for Business PC (200/300 series), Thin Clients and Home PC tables. |
October 2, 2020 |
3 |
Updated Business PC and Home PC platform lists. |
April 20, 2020 |
2 |
Updated Business PC and Retail Point of Sale platform lists. |
March 18, 2020 |
1 |
Initial Release |
February 11, 2020 |
Follow these links for additional information.
Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
For issues about implementing the recommendations of this Security Bulletin, visit http://www.hp.com/go/contacthp to learn about your HP support options.
To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://h41369.www4.hp.com/alerts-signup.php?lang=en&cc=US&jumpid=hpsc_profile.
To view released Security Bulletins, visit https://support.hp.com/security-bulletins.
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.
HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Security Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Security Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement.
© Copyright 2020 HP Development Company, L.P.
HP Inc. (HP) shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP nor its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. "HP Inc.," "HP" and the names of HP products referenced herein are trademarks of HP Inc. or its affiliates in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.