solution Contentsolution Content

SUPPORT COMMUNICATION- SECURITY BULLETIN

Document ID: c05843704

Version: 6

HPSBHF03571 rev. 6 - Intel Management Engine Cumulative Security update and fix for WPA2 vulnerability

Notice: The information in this security bulletin should be acted upon as soon as possible.

Release date : 22-Nov-2017

Last updated : 28-Sep-2018

Potential Security Impact:
Potential denial of service or escalation of privilege.
Source: Intel
Reported By: Intel

VULNERABILITY SUMMARY
Potential security vulnerabilities have been identified with certain versions of Intel Active Management Technology, Management Engine Firmware, and Management Engine Software.
  • The Cumulative Security update and WPA2 vulnerability fix impacts ME versions 11.x, 10.x, 9.x, and 8.x. The Cumulative Security fix addresses vulnerabilities that could potentially place impacted platforms at risk.
  • The WPA2 fix addresses vulnerabilities associated with handling of WPA/WPA2 keys as part of a wireless network and will help prevent unauthorized access to the network. The Wi-Fi fix addresses potential denial-of-service attacks in wireless networks.
    note:
    For the WPA2 vulnerability and the Intel ME firmware update, software driver fixes for WLAN devices are also needed. They are available via the following Security Bulletin: HPSBHF03582 rev. 2 - KRACK Vulnerability Affecting WPA2 Wireless Security.
Reference Number
PSR-2017-0155, PSR-2017-0160
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
Please refer to the RESOLUTION below for the list of potentially impacted HP products.
BACKGROUND
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com
CVSS 3.0 Base Metrics
Reference
Base Vector
Base Score
CVE-2017-13077
CVE-2017-13078
CVE-2017-13080
CVE-2017-5729
CVE-2017-5729
CVE-2017-5705
CVE-2017-5708
CVE-2017-5711
CVE-2017-5712
AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.3
8.3
4.7
4.7 (Windows)
6.1 (Linux)
8.2
7.5
6.7
7.2
Information on CVSS is documented in HP Customer Notice: HPSN­2008­002.
RESOLUTION
HP has provided updates for the Intel ME firmware. Impacted HP platforms are shown in the tables below.

Commercial Desktop Workstations

Product
Fixed ME FW Version
Windows ME FW Softpaq #
Windows FW Softpaq # / Link to download
Linux FW Softpaq #
Linux FW Softpaq # / Link to download
ME Driver Softpaq #
Windows Driver SoftPaq # / Link to download
HP Z1 Workstation
8.1.71.3608
SP82644
SP82684
N/A
HP Z1 G2 Workstation
9.1.42.3002
SP82642
SP82683
SP82203
HP Z1 G3 Workstation
11.8.50.3399
SP82201
SP82200
SP82203
HP Z2 Mini G3 Workstation
11.8.50.3399
SP82201
SP82200
SP82203
HP Z200 Workstation
N/A
N/A
N/A
N/A
N/A
N/A
N/A
HP Z200 Workstation SFF
N/A
N/A
N/A
N/A
N/A
N/A
N/A
HP Z210 Convertible Minitower Workstation
N/A
N/A
N/A
N/A
N/A
N/A
N/A
HP Z210 Small Form Factor Workstation
N/A
N/A
N/A
N/A
N/A
N/A
N/A
HP Z220 CMT Workstation
8.1.72.3002
SP82644
SP82684
N/A
N/A
HP Z220 SFF Workstation
8.1.72.3002
SP82644
SP82684
N/A
N/A
HP Z228 Microtower Workstation
9.1.42.3002
SP82642
SP82683
SP82203
HP Z230 MT Workstation
9.1.42.3002
SP82642
SP82683
SP82203
HP Z230 SFF Workstation
9.1.42.3002
SP82642
SP82683
SP82203
HP Z238 Microtower Workstation
11.8.50.3399
SP82201
SP82200
SP82203
HP Z240 SFF Workstation
11.8.50.3399
SP82201
SP82200
SP82203
HP Z240 Tower Workstation
11.8.50.3399
SP82201
SP82200
SP82203
HP Z420 Workstation (ME FW 7)
N/A
N/A
N/A
N/A
N/A
N/A
N/A
HP Z420 Workstation (ME FW 8)
8.1.72.3002
SP82644
SP82684
N/A
N/A
HP Z440 Workstation
9.1.42.3002
SP82642
SP82683
SP82203
HP Z4 Gen4 Workstation
11.11.50.1422
N/A
N/A
N/A
N/A
SP82203
HP Z620 Workstation (ME FW 7)
N/A
N/A
N/A
N/A
N/A
N/A
N/A
HP Z620 Workstation (ME FW 8)
8.1.72.3002
SP82644
SP82684
N/A
N/A
HP Z640 Workstation
9.1.42.3002
SP82642
SP82683
SP82203
HP Z6 Gen4 Workstation
11.21.50.1400
N/A
N/A
N/A
N/A
SP82203
HP Z820 Workstation (ME FW 7)
N/A
N/A
N/A
N/A
N/A
N/A
N/A
HP Z820 Workstation (ME FW 8)
8.1.72.3002
SP82644
SP82684
N/A
N/A
HP Z840 Workstation
9.1.42.3002
SP82642
SP82683
SP82203
HP Z8 Gen 4 Workstation
11.21.50.1400
N/A
N/A
N/A
N/A
SP82203

Commercial Desktops and Notebooks

Product Name
Fixed ME FW version
Fixed ME Driver Version
ME FW Softpaq #
Softpaq Link for ME FW
ME Driver Softpaq #
Softpaq link for ME Driver
HP ProBook 430 G5 Notebook PC
11.8.50.3425
11.7.0.1045
SP82610
SP82469
HP ProBook 440 G5 Notebook PC
11.8.50.3425
11.7.0.1045
SP82610
SP82469
HP ProBook 450 G5 Notebook PC
11.8.50.3425
11.7.0.1045
SP82610
SP82469
HP ProBook 470 G5 Notebook PC
11.8.50.3425
11.7.0.1045
SP82610
SP82469
HP ZHAN 66 Pro G1
11.8.50.3425
11.7.0.1045
SP82610
SP82469
HP ZHAN 66 Pro G1
11.8.50.3425
11.7.0.1045
SP82610
SP82469
HP mt21 Mobile Thin Client
11.8.50.3425
11.7.0.1045
SP82494
SP82714
HP Elite Slice
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP EliteOne 1000 G1 AiO PC
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP EliteDesk 800 G3 TWR
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP EliteDesk 880 G3 TWR
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP EliteDesk 800 G3 SFF
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP EliteOne 800 G3 AiO PC
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP EliteOne 800 G3 GPU AiO PC
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP EliteDesk 800 G3 DM
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP ProDesk 600 G3 MT
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP ProDesk 680 G3 MT
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP ProDesk 600 G3 SFF
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP ProOne 600 G3 AiO PC
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP ProDesk 600 G3 DM
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP ProDesk 400 G4 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP ProDesk 480 G4 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP ProDesk 400 G4 SFF
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP ProOne 400 G3 AiO PC
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP ProDesk 400 G3 DM
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP 280 G3 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP 282 Pro G3 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP Zhan 86 Pro G1 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP 280 G3 PCI MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP 280 Pro G3 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP 288 Pro G3 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP 290 G1 MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP 290 G1 PCI MT
11.8.50.3425
11.7.0.1045
SP82474
SP82434
HP ElitePOS G1 Retail System
11.8.50.3425
11.7.0.1045
SP82475
SP82432
HP ZBook 17 G4 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ZBook 15 G4 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ZBook Studio G4 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP EliteBook x360 1020 G2 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP EliteBook x360 1030 G2 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP EliteBook 1040 G4 Notebook PC H
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP EliteBook 1040 G4 Notebook PC U
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP Elite x2 1012 G2 Tablet
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ZBook 15u G4 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ZBook 14u G4 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP EliteBook 850 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP EliteBook 840 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP EliteBook 848 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ProBook 640 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ProBook 650 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ProBook 650 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP Pro x2 612 G2
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP ProBook 430 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82469
HP ProBook 440 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82469
HP ProBook 450 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82469
HP ProBook 470 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82469
HP ProBook 430 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82486
SP82469
HP mt20 Mobile Thin Client
11.8.50.3425
11.7.0.1045
SP82494
SP82469
HP ProBook x360 11 G2 Education Edition
11.8.50.3425
11.7.0.1045
SP82494
SP82690
HP EliteDesk 800 G2 TWR
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP EliteDesk 800 G2 SFF
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP ProDesk 600 G2 SFF
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP ProDesk 480 G3 SFF
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP ProDesk 400 G3 SFF
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP ProDesk 400 G3 SFF
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP ProDesk 490 G3 SFF
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP ProDesk 498 G3 SFF
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP EliteOne 800 G2 AiO PC
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP ProOne 600 G2 AiO PC
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP ProOne 400 G2 AiO PC
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP EliteDesk 800 G2 DM
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP MP9G2 Retail System
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP ProDesk 600 G2 DM
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP ProDesk 400 G2 DM
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP RP9 G1 Retail System
11.8.50.3425
11.7.0.1045
SP82476
SP82435
HP EliteBook 840 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP EliteBook 848 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP EliteBook 850 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ZBook 15u G3 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP EliteBook 820 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP EliteBook 828 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ProBook 640 G2 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ProBook 640 G2 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ProBook 430 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82496
SP82472
HP ProBook 440 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82496
SP82472
HP ProBook 450 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82496
SP82472
HP ProBook 470 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82496
SP82472
HP ZBook 17 G3 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ZBook 15 G3 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ZBook Studio G3 Mobile Workstation
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP EliteBook Folio 1040 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP EliteBook 1030 G1 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP Elite x2 1012 G1 Tablet
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ProBook 650 G2 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP EliteBook Folio G1 Notebook PC
11.8.50.3425
11.7.0.1045
SP82487
SP82472
HP ProBook 11 G2 Education Edition
11.8.50.3425
11.7.0.1045
SP82496
SP82698
HP 260 G2 DM
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP 340 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82496
SP82454
HP 346 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82496
SP82454
HP 348 G3 Notebook PC
11.8.50.3425
11.7.0.1045
SP82496
SP82454
HP 340 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82455
HP 346 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82455
HP 348 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82455
HP 340 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82455
HP 346 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82455
HP 348 G4 Notebook PC
11.8.50.3425
11.7.0.1045
SP82494
SP82455
HP 280 G2 Small Form Factor PC
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP 280 G2 Microtower Business PC
11.8.50.3425
11.7.0.1045
SP82477
SP82436
HP 406 Microtower Business PC
11.8.50.3425
11.7.0.1045
SP82476
SP82436
HP EliteBook 740 G2 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook 840 G2 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook 750 G2 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook 850 G2 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP ZBook 14 G2 Mobile Workstation
10.0.56.3002
N/A
SP82539
N/A
N/A
HP ZBook 15u G2 Mobile Workstation
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook 720 G2 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook 820 G2 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook Folio 1020 G1 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook 1040 G2 Notebook PC
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook Revolve 810 G3
10.0.56.3002
N/A
SP82539
N/A
N/A
HP Elite x2 1011 G1 Tablet
10.0.56.3002
N/A
SP82539
N/A
N/A
HP EliteBook Folio 9480m Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP Pro x2 612 G1 Tablet
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook 740 G1 Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook 840 G1 Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP ZBook 14 Mobile Workstation
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook 750 G1 Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook 850 G1 Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook 720 G1 Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook 820 G1 Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook Folio 1040 G1 Notebook PC
9.5.62.3002
N/A
SP82540
N/A
N/A
HP EliteBook Revolve 810 G2
9.5.62.3002
N/A
SP82540
N/A
N/A
HP ZBook 15 G2 Mobile Workstation
9.1.42.3002
N/A
SP82541
N/A
N/A
HP ZBook 17 G2 Mobile Workstation
9.1.42.3002
N/A
SP82541
N/A
N/A
HP ZBook 15 Mobile Workstation
9.1.42.3002
N/A
SP82541
N/A
N/A
HP ZBook 17 Mobile Workstation
9.1.42.3002
N/A
SP82541
N/A
N/A
HP ProBook 650 G1 Notebook PC
9.1.42.3002
N/A
SP82541
N/A
N/A
HP ProBook 640 G1 Notebook PC
9.1.42.3002
N/A
SP82541
N/A
N/A
HP EliteDesk 800 G1 DM
9.1.42.3002
N/A
SP82529
N/A
N/A
HP ProDesk 600 G1 DM
9.1.42.3002
N/A
SP82529
N/A
N/A
HP ProDesk 600 G1 TWR
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteOne 800 G1 21.5-in Non-Touch AiO
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteOne 800 G1 Touch Retail AiO 23
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteOne 800 G1 AiO
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteOne 800 G1 Touch AiO
9.1.42.3002
N/A
SP82529
N/A
N/A
HP ELITEDESK 700 G1 SFF PC
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteDESK 800 G1 SFF
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteDesk 880 G1 TWR
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteDesk 800 G1 TWR
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteDesk 800 G1 USDT
9.1.42.3002
N/A
SP82529
N/A
N/A
HP ProOne 600 G1 AiO Business PC
9.1.42.3002
N/A
SP82529
N/A
N/A
HP RP5 Retail System Model 5810
9.1.42.3002
N/A
SP82529
N/A
N/A
HP MP9 Model 9000 Digital Signage Player
9.1.42.3002
N/A
SP82529
N/A
N/A
HP EliteBook 8770w Mobile Workstation
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook 8570w Mobile Workstation
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook 8470w Mobile Workstation
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook 8470p Notebook PC
8.1.72.3002
N/A
SP82542
N/A
N/A
HP ProBook 6470b Notebook PC
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook 8570p Notebook PC
8.1.72.3002
N/A
SP82542
N/A
N/A
HP ProBook 6570b Notebook PC
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook 2570p Notebook PC
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook 2170p Notebook PC
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook Folio 9470m Notebook PC
8.1.72.3002
N/A
SP82542
N/A
N/A
HP EliteBook Revolve 810 G1
8.1.72.3002
N/A
SP82542
N/A
N/A
HP Compaq Elite 8380 CMT PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Elite 8300 CMT PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Elite 8380 MT PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Elite 8300 MT PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Elite 8300 SFF PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Elite 8300 23 Touch AiO PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Elite 8300 23 AiO PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Elite 8300 USDT PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Pro 6300 AiO 21.5 PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Pro 6300 MT PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Pro 6300 SFF PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP Compaq Pro 6380 MT PC
8.1.72.3002
N/A
SP82530
N/A
N/A
HP 240 G5 Notebook PC (Skylake or Kabylake)
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 240 G5 Notebook PC (APL)
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 240 G6 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 240 G6 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 246 G5 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 246 G5 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 246 G6 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 246 G6 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 250 G5 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 250 G5 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 250 G6 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 250 G6 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 256 G5 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 256 G5 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 256 G6 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 256 G6 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP 258 G6 Notebook PC
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP 258 G6 Notebook PC
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A
HP Spectre Pro x360 G2
Ver. 1.0 Rev.A (ME)
N/A
SP82271
N/A
N/A
HP Spectre Pro x360 G2
Ver. 1.0 Rev.A (ME)
N/A
SP82586
N/A
N/A
HP Stream 11 Pro G4 EE
Ver. 1.0 Rev.A (TXEI)
N/A
SP82668
N/A
N/A

Consumer Desktops

Product Name
ME Softpaq #
Softpaq link
HP Pavilion 24-b2XX All-in-One PC
SP82271
HP Pavilion 27-a2XX All-in-One PC
SP82271
HP Pavilion 27-q2XX All-in-One PC
SP82271
HP Pavilion 27-q2XX All-in-One PC
SP82271
HP ProOne 440 G3 AiO
SP82271
HP ProOne 490 G3 AiO
SP82271
HP Pavilion 24-a2XX All-in-One PC
SP82271
HP Pavilion 560-p1xx Desktop PC
SP82271
HP Pavilion Power 580-0xx Desktop
SP82271
HP Pavilion Power 580-1xx Desktop
SP82271
OMEN by HP 880-0xx Desktop PC
SP82271
OMEN by HP 880-1xx Desktop PC
SP82271
HP Pavilion 24-r0xx All-in-One PC
SP82271
HP Pavilion 24-x0xx All-in-One PC
SP82271
HP Z VR Backpack G1 Workstation
SP82586
HP Slimline 270-a0xx Desktop PC
SP82668
HP Slimline 270-p0xx Desktop PC
SP82271
HP 27-b0xx All-in-One
SP82271
HP 34-b0xx All-in-One
SP82271
HP Pavilion 570-a0xx Desktop PC
SP82668
HP Pavilion 570-p0xx Desktop PC
SP82271
HP Pavilion Wave 600-a1xx Desktop
SP82271
HP Pavilion Wave 600-a2xx Desktop
SP82271
HP Pavilion Wave 600-a3XX Desktop
SP82271
OMEN by HP 870-2xx
SP82271
OMEN X by HP 900-1xx Desktop PC
SP82271
OMEN X by HP 900-2xx Desktop PC
SP82271
HP HP ENVY 750-4xx Desktop PC
SP82271
HP Pavilion 24-b0XX All-in-One PC
SP82271
HP Pavilion 24-b1XX All-in-One PC
SP82271
HP Pavilion 27-a1XX All-in-One PC
SP82271
HP Pavilion 24-a0XX All-in-One PC
SP82271
HP Pavilion 24-a1xx All-in-One PC
SP82271
HP Pavilion 560-p0xx Desktop PC
SP82271
HP All-in-One 20-c0xx
SP82271
HP All-in-One 20-c1xx
SP82271
HP All-in-One 22-b0xx
SP82271
HP All-in-One 22-b1xx
SP82271
HP All-in-One 24-g0xx
SP82271
HP All-in-One 24-g1xx
SP82271
HP Slimline 260-p0xx Desktop PC
SP82271
HP Slimline 260-p1xx Desktop PC
SP82271
HP 27-b0xx All-in-One
SP82271
HP 460-p0xx Desktop PC
SP82271
HP Pavilion 510-p0xx Desktop PC
SP82271
HP Pavilion 510-p1xx Desktop PC
SP82271
HP Pavilion Wave 600-axxx Desktop
SP82271
OMEN by HP 870-xxx Desktop PC
SP82271
OMEN X by HP 900-0xx Desktop PC
SP82271
HP Pavilion All-in-One 22-a0XX
SP82271
HP ENVY 750-0xx
SP82271
HP ENVY All-in-One PC 27-p0XX
SP82271
HP All-in-One 20-r0XX
SP82271
HP Pavilion 550-0xx, HP Pavilion 550-axx
SP82271
HP Pavilion All-in-One 23-q0XX
SP82271
HP ENVY All-in-One PC 24-n0XX
SP82271
HP Slimline 450-0xx, HP Slimline 450-axx, Compaq Slimline 430-0xx, Compaq Slimline 430-axx
SP82271
HP All-in-One 23-r0XX
SP82271
HP Pavilion All-in-One 27-n0XX
SP82271
HP ENVY Curved All-in-One PC 34-a0XX
SP82271
HP All-in-One 22-30XX
SP82271
HP ENVY PHOENIX 850-0xx
SP82271
HP ENVY PHOENIX 860-0xx
SP82271

Consumer Notebooks

Product Name
ME Softpaq #
Softpaq Link
HP Pavilion x360 Convertible 11-k0xx, 11t-k000
SP82271
HP Pavilion Notebook 14-ab1xx, 14t-ab100
SP82271
HP Pavilion Notebook 15-ab2xx, 15t-ab200
SP82271
HP Pavilion Notebook 15-ab2xx, 15t-ab200
SP82271
HP Pavilion Notebook 15-bj0xx, 15t-bj000
SP82271
HP Pavilion x360 Convertible 13-s1xx, 13t-s100
SP82271
HP Pavilion Notebook 17-g1xx, 17-g2xx, 17t-g100, 17t-g200
SP82271
HP ENVY Notebook 17-s0xx, 17t-s000
SP82271
HP Pavilion x360 Convertible 11-k1xx, 11t-k100
SP82271
HP ENVY Notebook15-q4xx, 15t-q400
SP82271
HP ENVY x360 Convertible 15-w1xx, 15t-w100, m6-w1xx
SP82271
HP ENVY Notebook 14-j1xx, 14t-j100
SP82271
HP ENVY Notebook17-n1xx, 17t-n100, m7-n1xx, 17-r0xx, 17t-r200
SP82271
HP Spectre x2 Detachable 12-a0xx, 12-ab0xx, 12t-a000, 12t-ab000
SP82271
HP Spectre x360 Convertible 13-41xx, 13t-4100
SP82271
Commercial NB
SP82271
Commercial NB
SP82586
HP ENVY Notebook 15-ae1xx, 15t-ae100, m6-ae1xx
SP82271
HP ENVY x360 Convertible 15-u4xx, 15t-u400
SP82271
HP ENVY Notebook 13-d0xx, 13t-d000
SP82271
HP Pavilion x2 Detachable 12-b0xx, 12t-b000
SP82271
HP Spectre x360 Convertible 15-ap0xx, 15t-ap000
SP82271
HP ENVY Notebook 13-d1xx, 13t-d100
SP82271
HP Pavilion x360 Convertible 13-u0xx, 13t-u000, m3-u0xx
SP82271
HP Notebook 15-bn0xx, 15t-bn000, 15-ay0xx, 15-ay5xx, 15t-ay000, 15t-ay500, 15-bd0xx, 15-be0xx
SP82271
HP Notebook 15-bn0xx, 15t-bn000, 15-ay0xx, 15-ay5xx, 15t-ay000, 15t-ay500, 15-bd0xx, 15-be0xx
SP82668
Commercial NB
SP82668
OMEN by HP Laptop 17-w0xx, 17t-w000
SP82271
HP Pavilion x2 Detachable 12-b1xx, 12t - b100
SP82271
HP Pavilion x360 Convertible 15-bk0xx, 15t-bk000
SP82271
OMEN by HP Laptop 15-ax0xx, 15t-ax000
SP82271
HP ENVY x360 Convertible 15-aq0xx, 15t-aq000, m6-aq0xx
SP82271
HP Pavilion x360 Convertible 11-u0xx, 11t-u000
SP82271
HP Notebook 17-x0xx, 17-x5xx, 17t-x000, 17t-x500, 17-ac0xx, 17-ad0xx
SP82271
HP Pavilion Notebook 17-ab0xx, 17t-ab000
SP82271
HP Spectre x360 Convertible 13-42xx, 13t-4200
SP82271
HP Notebook 14-am0xx, 14-am5xx, 14t-am000, 14t-am500, 14-aq0xx, 14-ar0xx
SP82271
HP Pavilion Notebook 15-au0xx, 15-au5xx, 15t-au000, 15t-au500
SP82271
HP Spectre Notebook 13-v0xx, 13t-v000
SP82271
HP ENVY m7 Notebook m7-u0xx, HP ENVY Notebook 17-u0xx, 17t-u000
SP82271
HP Pavilion Notebook 14-al0xx, 14t-al000
SP82271
HP Pavilion Notebook 15-bc0xx, 15t-bc000
SP82271
HP ENVY Notebook 15-as0xx, 15t-as000
SP82271
HP Pavilion x360 Convertible 13-u1xx, 13t-u100, HP Pavilion x360 m3 Convertible m3-u1xx
SP82271
HP ENVY Notebook 13-ab0xx, 13t-ab000
SP82271
HP Notebook 15-ay1xx, 15-ay6xx, 15t-ay100, 15t-ay600, 15-bd1xx, 15-be1xx
SP82271
OMEN by HP Laptop 17-w1xx, 17t-w100
SP82271
HP ENVY Notebook 13-ab0xx, 13t-ab000
SP82271
HP ENVY Notebook 17-s1xx, 17t-s100
SP82271
HP Pavilion x360 Convertible 15-bk1xx, 15t-bk100
SP82271
OMEN by HP Laptop 15-ax1xx, 15t-ax100
SP82271
HP ENVY x360 Convertible 15-w2xx, 15t-w200
SP82271
HP ENVY x360 Convertible 15-aq1xx, 15t-aq100, HP ENVY x360 m6 Convertible m6-aq1xx
SP82271
HP Pavilion x360 Convertible 11-u1xx, 11t-u100, HP Pavilion x360 m1 Convertible m1-u1xx
SP82271
HP Notebook 17-x1xx, 17-x6xx, 17t-x100, 17t-x600, 17-ac1xx, 17-ad1xx
SP82271
HP ENVY x360 Convertible 13-y0xx, 13t-y000
SP82271
HP Notebook 14-am1xx, 14t-am100, 14-aq1xx, 14-ar1xx
SP82271
HP Notebook 14-am1xx, 14t-am100, 14-aq1xx, 14-ar1xx
SP82668
HP Pavilion Notebook 15-au1xx, 15-au6xx, 15t-au100, 15t-au600
SP82271
HP Spectre Notebook 13-v1xx, 13t-v100
SP82271
HP ENVY m7 Notebook m7-u1xx, HP ENVY Notebook 17-u1xx, 17t-u100
SP82271
HP Pavilion Notebook 14-al1xx, 14t-al100
SP82271
HP Spectre x360 Convertible 13-w0xx, 13t-w000
SP82271
HP ENVY Notebook 15-as1xx, 15t-as100
SP82271
OMEN by HP Laptop 17-w2xx, 17t-w200
SP82271
HP Spectre x360 Convertible 15-bl0xx, 15t-bl000
SP82271
OMEN by HP Laptop 15-ax2xx, 15t-ax200
SP82271
HP Pavilion Notebook 17-ab2xx, 17t-ab200
SP82271
HP Spectre x360 Convertible 13-ac0xx, 13t-ac000
SP82271
HP Pavilion Notebook 15-bc2xx, 15t-bc200
SP82271
HP Spectre x2 Detachable 12-c0xx, 12t-c000
SP82271
HP Pavilion x360 Convertible 11-ad0xx, 11t-ad000, 11m-ad0xx
SP82668
HP Pavilion x360 Convertible 14-ba0xx, 14-ba5xx, 14t-ba000, 14t-ba500, 14m-ba0xx, 14-cc0xx, 14t-cc000
SP82271
HP Pavilion x360 Convertible 15-br0xx, 15t-br000
SP82271
HP ENVY x360 Convertible 15-bp0xx, 15t-bp000, 15m-bp0xx
SP82271
HP Laptop 14-bp0xx, 14t-bp000, 14s-bp0xx, 14s-bc0xx, 14s-be0xx
SP82271
HP Pavilion Laptop 14-bk0xx, 14t-bk000
SP82271
HP Pavilion Power Laptop 15-cb0xx, 15-cb5xx, 15t-cb000, 15t-cb500
SP82271
HP Pavilion Laptop 15-cc0xx, 15t-cc000
SP82271
HP Pavilion Laptop 15-cc5xx, 15-cc7xx, 15t-cc500, 15t-cc700
SP82271
HP ENVY Laptop 13-ad0xx, 13t-ad000
SP82271
HP ENVY Laptop 17-ae0xx, 17t-ae000, 17m-ae0xx
SP82271
HP Laptop 17-bs0xx, 17-bs5xx, 17t-bs000, 17t-bs500, 17g-br0xx, 17q-bu0xx
SP82271
OMEN X by HP Laptop 17-ap0xx, 17t-ap000
SP82271
OMEN by HP Laptop 15-ce0xx, 15t-ce000
SP82271
OMEN by HP Laptop 17-an0xx, 17t-an000
SP82271
HP Pavilion Laptop 14-bf0xx, 14t-bf000
SP82271
HP Laptop 15-bs0xx, 15-bs5xx, 15-bs6xx, 15t-bs000, 15t-bs500, 15t-bs600, 15g-br0xx, 15q-bu0xx
SP82271
HP Laptop 15-bs0xx, 15-bs5xx, 15-bs6xx, 15t-bs000, 15t-bs500, 15t-bs600, 15g-br0xx, 15q-bu0xx
SP82668
HP Laptop 14-bs0xx, 14-bs5xx, 14t-bs000, 14t-bs500, 14g-br0xx, 14q-bu0xx
SP82271
HP ENVY Notebook 17-u2xx, 17t-u200
SP82271
HP Pavilion x360 Convertible 14-ba1xx, 14t-ba100, 14m-ba1xx, 14t-cc100, 14-cc1xx
SP82271
HP ENVY Laptop 13-ad1xx, 13t-ad100
SP82271
HP ENVY Laptop 17-ae1xx, 17t-ae100, 17m-ae1xx
SP82271
HP Laptop 14-bp1xx, 14s-bp1xx, 14s-bc1xx, 14s-be1xx
SP82271
HP Pavilion Laptop 14-bk1xx, 14t-bk100
SP82271
HP Pavilion Laptop 14-bf1xx, 14t-bf100
SP82271
HP Spectre x360 Convertible 15-bl1xx, 15t-bl100
SP82271
HP ENVY x360 Convertible 15-bp1xx, 15t-bp100, 15m-bp1xx
SP82271
HP Pavilion x360 Convertible 15-br1xx, 15t-br100
SP82271
HP Pavilion Laptop 15-cc1xx, 15t-cc100
SP82271
HP Pavilion Laptop 15-cc1xx, 15t-cc100
SP82271
HP Pavilion Laptop 15-cc6xx, 15t-cc600
SP82271
HP Laptop 17-bs1xx, 17t-bs100, 17g-br1xx, 17q-bu1xx
SP82271
HP ENVY x360 Convertible 15-aq2xx, 15t-aq200
SP82271
HP Pavilion Notebook 15-bc3xx, 15t-bc300
SP82271
HP Pavilion Notebook 17-ab3xx, 17t-ab300
SP82271
HP Pavilion Notebook 17-ab3xx, 17t-ab300
SP82271
HP Laptop 14-bs1xx, 14-bs6xx, 14t-bs100, 14t-bs600, 14g-br1xx, 14q-bu1xx
SP82271
HP Laptop 14-bs1xx, 14-bs6xx, 14t-bs100, 14t-bs600, 14g-br1xx, 14q-bu1xx
SP82668
HP Laptop 15-bs1xx, 15-bs7xx, 15t-bs100, 15t-bs700, 15g-br1xx, 15q-bu1xx
SP82271
HP Laptop 15-bs1xx, 15-bs7xx, 15t-bs100, 15t-bs700, 15g-br1xx, 15q-bu1xx
SP82668
HP Spectre Laptop 13-af0xx, 13-af5xx, 13t-af000, 13t-af500
SP82271
HP Spectre x360 Convertible 13-ae0xx, 13-ae5xx, 13t-ae000, 13t-ae500
SP82271
HP Pavilion Laptop 15-ck0xx, 15t-ck000
SP82271

Immersive Computing

Product
Fixed ME FW Version
Windows ME FW Softpaq #
Windows FW Softpaq # / Link to download
Sprout Pro by HP
11.8.50.3460
SP88517
Sprout Pro by HP G2
11.8.50.3460
SP88516
...
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit http://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://h41369.www4.hp.com/alerts-signup.php?lang=en&cc=US&jumpid=hpsc_profile.
Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
PI
HP Printing and Imaging
HF
HP Hardware and Firmware
GN
HP General Software
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISION HISTORY : Version 1: 22 November 2017 Initial release; Version 2: 30 November 2017 Added consumer desktop and notebook tables; Version 3: 22 January 2018 Updated the URLs in the Consumer Desktops and Consumer Notebooks tables. Version 4: June 22, 2018 Updated reference to WPA2 KRACK Security Bulletin. Version 5: 7 August, 2018, deleted extra/non-impacted platform entries, added Immersive Computing section. Version 6: 28 September 2018 - updated remaining TBD items, added commercial platforms, updated naming for Immersive products.

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.