solution Contentsolution Content

SUPPORT COMMUNICATION- SECURITY BULLETIN

Document ID: c06163738

Version: 6

HPSBHF03595 rev. 6 - LoJax UEFI Rootkit

Notice: The information in this security bulletin should be acted upon as soon as possible.

Release date : 10-Oct-2018

Last updated : 23-Apr-2019

Potential Security Impact:
Elevation of Privilege, Information Disclosure, Loss of Confidentiality, Loss of Integrity.
Source: HP, HP Product Security Response Team (PSRT)
Reported by: ESET Research

VULNERABILITY SUMMARY
HP has identified a potential security vulnerability with a UEFI rootkit (LoJax). This rootkit can be loaded into a vulnerable system UEFI firmware which then has the ability to write to the system disk and tamper with the operating system such that a communications channel can be set up between the affected system and an unauthorized Command and Control server. This UEFI rootkit requires administrative rights in Windows and cannot work if full volume encryption (for example, BitLocker) is enabled or UEFI firmware write protections have been set.
Reference Number
CVE TBD PSR-2018-0234
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
Windows
BACKGROUND
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com.
CVSS 3.0 Base Metrics
Reference
Base Vector
Base Score
CVE TBD
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
7.5
RESOLUTION
Flash write protection needs to be properly set up in system BIOS per NIST SP 800-147. Systems with HP Sure Start are protected from this vulnerability.
HP is identifying affected platforms and target dates for Softpaqs. See the affected platforms listed below.
note:
This bulletin will be updated. Check back frequently for updates to this section and other sections.
HP recommends keeping your system up to date with the latest firmware.

Business PCs and Retail Point-of-Sale systems

Product
Updated Version
Softpaq #
Softpaq Link
HP 200 G3 (ROM Family SSID 8431)
F.20
SP92781
HP 200 G3 (ROM Family SSID 84DE)
F.10
SP92653
HP 205 G3 AiO (ROM Family SSID 8245)
F.44
SP93445
HP 205 G3 AiO (ROM Family SSID 8381)
F.40
SP92796
HP 240 G4
F.28
SP93167
HP 240 G5
F.34
SP93354
HP 240 G5 Notebook PC
Not Available
Not Available
Not Available
HP 240 G6 Notebook PC
F.43
SP93355
HP 245 G4
Not Available
Not Available
Not Available
HP 245 G5 Notebook PC
Not Available
Not Available
Not Available
HP 246 G4
F.28
SP93167
HP 246 G5
F.34
SP93354
HP 246 G6 Notebook PC
F.43
SP93355
HP 250 G3
F.46
SP93115
HP 250 G4
F.28
SP93116
HP 250 G5
F.46
SP93166
HP 250 G6 Notebook PC
F.51
SP93384
HP 255 G1
Not Available
Not Available
Not Available
HP 255 G3
Not Available
Not Available
Not Available
HP 255 G4
Not Available
Not Available
Not Available
HP 255 G5
F.34
SP93354
HP 255 G6
F.40
SP93173
HP 256 G3
F.46
SP93115
HP 256 G4
F.28
SP93116
HP 256 G5
F.46
SP93166
HP 256 G6 Notebook PC
F.51
SP93384
HP 258 G6 Notebook PC
F.51
SP93384
HP 260 G1 Desktop Mini Business PC
2.26
SP93258
HP 260 G2 DM
2.14
SP93261
HP 280 G3 (ROM Family SSID 843F)
F.20
SP93065
HP 280 G3 (ROM Family SSID 8440)
F.20
SP93066
HP 280 G4 MT Business PC (ROM Family SSID 843C)
F.20
SP93063
HP 280 G4 MT Business PC (ROM Family SSID 843D)
F.20
SP93064
HP 280 Pro G3 (ROM Family SSID 843F)
F.20
SP93065
HP 280 Pro G3 (ROM Family SSID 8440)
F.20
SP93066
HP 280 Pro G4 MT Business PC (ROM Family SSID 843C)
F.20
SP93063
HP 280 Pro G4 MT Business PC (ROM Family SSID 843D)
F.20
SP93064
HP 282 Pro G4 MT Business PC (ROM Family SSID 843C)
F.20
SP93063
HP 282 Pro G4 MT Business PC (ROM Family SSID 843D)
F.20
SP93064
HP 285 G3 MT Business PC (ROM Family SSID 8434)
F.20
SP92483
HP 285 G3 MT Business PC (ROM Family SSID 8435)
Not Available
Not Available
Not Available
HP 285 Pro G3 MT Business PC (ROM Family SSID 8434)
F.20
SP92483
HP 285 Pro G3 MT Business PC (ROM Family SSID 8435)
Not Available
Not Available
Not Available
HP 288 Pro G4 MT Business PC (ROM Family SSID 843C)
F.20
SP93063
HP 288 Pro G4 MT Business PC (ROM Family SSID 843D)
F.20
SP93064
HP 290 G1 (ROM Family SSID 843F)
F.20
SP93065
HP 290 G1 (ROM Family SSID 8440)
F.20
SP93066
HP 290 G2 MT Business PC (ROM Family SSID 843C)
F.20
SP93063
HP 290 G2 MT Business PC (ROM Family SSID 843D)
F.20
SP93064
HP Desktop Pro A MT (ROM Family SSID 8434)
F.20
SP92483
HP Desktop Pro A MT (ROM Family SSID 8435)
Not Available
Not Available
Not Available
HP Desktop Pro G1 MT (ROM Family SSID 843C)
F.20
SP93063
HP Desktop Pro G1 MT (ROM Family SSID 843D)
F.20
SP93064
HP Pavilion 14 G1 Notebook PC
F.50
SP93111
HP ProOne 440 G3 (ROM Family SSID 81B7)
Not Available
Not Available
Not Available
HP ProOne 440 G3 (ROM Family SSID 82DC)
F.33
SP93323
HP ProOne 490 G3 (ROM Family SSID 81B7)
Not Available
Not Available
Not Available
HP ProOne 490 G3 (ROM Family SSID 82DC)
F.33
SP93323
HP ProOne 496 G3 (ROM Family SSID 81B7)
Not Available
Not Available
Not Available
HP ProOne 496 G3 (ROM Family SSID 82DC)
F.33
SP93323
HP RP2 Retail System
2.18
SP92743
HP Stream 11 Pro G4 EE
F.18
SP93406
HP x360 330 G1 PC
F.27
sp92744
HP Zhan 86 Pro G2 MT Business PC (ROM Family SSID 843C)
F.20
SP93063
HP Zhan 86 Pro G2 MT Business PC (ROM Family SSID 843D)
F.20
SP93064
HP Zhan 99 Pro G1 MT (ROM Family SSID 843C)
F.20
SP93063
HP Zhan 99 Pro G1 MT (ROM Family SSID 843D)
F.20
SP93064
Product
Minimum BIOS version
Access product support page for latest BIOS
HP EliteBook 8760w 
F.50
HP EliteBook 8460p
F.50
HP 6360t
F.50
HP Compaq 6200 Pro Microtower PC
2.28
HP Compaq 6200 Pro Small Form Factor PC
2.28
HP Compaq 8200 Elite All-in-One PC
2.15
HP Compaq 8200 Elite Convertible Minitower PC
2.28
HP Compaq 8200 Elite Microtower PC
2.28
HP Compaq 8200 Elite Small Form Factor PC
2.28
HP Compaq 8200 Elite Ultra-slim PC
2.28
HP Compaq Elite 8300 All-in-One PC
2.52
HP Compaq Elite 8300 Convertible Minitower PC
2.52
HP Compaq Elite 8300 Microtower PC
2.52
HP Compaq Elite 8300 Small Form Factor PC
2.52
HP Compaq Elite 8300 Ultra-slim PC
2.52
HP Compaq Pro 6300 All-in-One PC
2.52
HP Compaq Pro 6300 Microtower PC
2.52
HP Compaq Pro 6300 Small Form Factor PC
2.52
HP EliteBook 2170p
F.50
HP EliteBook 2560p
F.50
HP EliteBook 2570p
F.50
HP EliteBook 2760p 
F.50
HP EliteBook 8460w 
F.50
HP EliteBook 8470p
F.50
HP EliteBook 8470w 
F.50
HP EliteBook 8560p
F.50
HP EliteBook 8560w 
F.50
HP EliteBook 8570p
F.50
HP EliteBook 8570w 
F.50
HP EliteBook 8770w 
F.50
HP EliteBook Folio 9470m
F.50
HP EliteBook Folio 9470m Ultrabook
F.50
HP EliteBook Revolve 810 G1 Tablet
F.50
HP ProBook 440 G0
F.50
HP ProBook 450 G0
F.50
HP ProBook 470 G0
F.50
HP MP6 Digital Signage Player
2.52
HP mt40
F.50
HP MultiSeat ms6200 Desktop
2.28
HP ProBook 4230s 
F.50
HP ProBook 4330s
F.50
HP ProBook 4331s
F.50
HP ProBook 4340s
F.50
HP ProBook 4341s
F.50
HP ProBook 4430s
F.50
HP ProBook 4431s 
F.50
HP ProBook 4440s
F.50
HP ProBook 4441s
F.50
HP ProBook 4530s
F.50
HP ProBook 4540s
F.50
HP ProBook 4730s
F.50
HP ProBook 4740s
F.50
HP ProBook 5330m 
F.50
HP ProBook 6360b 
F.50
HP ProBook 6460b
F.50
HP ProBook 6470b
F.50
HP ProBook 6560b
F.50
HP ProBook 6570b
F.50
HP rp5800 Retail System
2.33
HP RP7 Retail System Model 7800
2.6
HP SignagePlayer mp8200
2.28
HP SignagePlayer mp8200s
2.28

Immersive PCs

Product
Updated Version
Softpaq #
Softpaq Link
Sprout by HP (Win8)
80.12
SP93379
Sprout by HP (Win10)
A0.08
SP94878
Sprout Pro by HP
A0.12
SP95110
Sprout Pro G2 by HP
A0.21
SP94881

Consumer PCs

Product
Updated Version
Softpaq #
Softpaq Link
Compaq 15-s200 ~ 15-s299
F.46
SP93115
Compaq 15-s200 ~ 15-s299 TouchSmart
F.46
SP93115
Compaq 15t-s200
F.46
SP93115
Compaq 15t-s200 TouchSmart
F.46
SP93115
ENVY x360 13-ag0xxx
F.32
SP93294
ENVY x360 13m-ag0xxx
F.32
SP93294
ENVY x360 15-ar0XX
F.22
SP93075
ENVY x360 m6-ar0XX
F.22
SP93075
HP  460-axxx (ROM Family SSID 821D)
F.46
SP92785
HP  460-pxxx (ROM Family SSID 81B4)
F.38
SP92929
HP 14-ac0XX
F.28
SP93167
HP 14-ac1XX
F.28
SP93167
HP 14-af0XX
Not Available
Not Available
Not Available
HP 14-af1XX
Not Available
Not Available
Not Available
HP 14-am0XX
F.34
SP93354
HP 14-am5xx
F.34
SP93354
HP 14-an000 ~ 14-an099
Not Available
Not Available
Not Available
HP 14-aq0XX
F.34
SP93354
HP 14-ar0XX
F.34
SP93354
HP 14-cf0xxx
F.34
SP95066
HP 14-ck0xxx
F.34
SP95066
HP 14-df0xxx
F.34
SP95066
HP 14-dg0xxx
F.34
SP95066
HP 14g-cr0xxx
F.34
SP95066
HP 14-ma0xxx
F.34
SP95066
HP 14q-cs0xxx
F.34
SP95066
HP 14s-cf0xxx
F.34
SP95066
HP 14s-cr0xxx
F.34
SP95066
HP 14s-cs0xxx
F.34
SP95066
HP 15-af1XX
Not Available
Not Available
Not Available
HP 15-ba000 ~ 15-ba099
F.34
SP93520
HP 15-ba100 ~ 15-ba199
F.34
SP93520
HP 15-bw0xx
F.40
SP93173
HP 15-da0000 ~ 15-da0099
F.16
Sp93413
HP 15-f0xx
Not Available
Not Available
Not Available
HP 15-f2xx
F.43
SP92728
HP 15-f3xx
F.43
SP92728
HP 15-g300~HP 15-g399
Not Available
Not Available
Not Available
HP 15g-bx0xx
F.40
SP93173
HP 15g-da0000 ~ 15g-da0099
F.16
Sp93413
HP 15q-by0xx
F.40
SP93173
HP 15q-da0000 ~ 15q-da0099
F.16
Sp93413
HP 15-r200 ~ HP15-r299
F.46
SP93115
HP 15-r200 ~ HP15-r299 TouchSmart
F.46
SP93115
HP 15t-r200
F.46
SP93115
HP 15t-r200 Touchsmart
F.46
SP93115
HP 17-ak000 ~ 17-ak099
F.10
SP93219
HP 17-x000~17-x099, 17-x500 - 17-x599
F.31
SP92953
HP 17-y000~17-y099
F.42
SP93407
HP 17-y500 - 17-y599
F.42
SP93407
HP 390-0xxx (ROM Family SSID 843C)
F.20
SP93063
HP All-in-One 20-c4XX (ROM Family SSID 8432)
F.20
SP92783
HP All-in-One 20-cxxx (ROM Family SSID 81BA)
F.47
SP93314
HP All-in-One 20-cxxx (ROM Family SSID 81BB)
F.51
SP93094
HP All-in-One 20-cxxx (ROM Family SSID 82DD)
F.18
SP92658
HP All-in-One 20-cxxx (ROM Family SSID 8304)
F.36
SP93285
HP All-in-One 22-bxxx (ROM Family SSID 81BA)
F.47
SP93314
HP All-in-One 22-bxxx (ROM Family SSID 81BB)
F.51
SP93094
HP All-in-One 22-bxxx (ROM Family SSID 82DD)
F.18
SP92658
HP All-in-One 22-bxxx (ROM Family SSID 8304)
F.36
SP93285
HP All-in-One 22-c0xxx (ROM Family SSID 8431)
F.20
SP92781
HP All-in-One 22-c0xxx (ROM Family SSID 8446)
F.10
SP92652
HP All-in-One 22-c0xxx (ROM Family SSID 84DE)
F.10
SP92653
HP All-in-One 22-cxxx (ROM Family SSID 8430)
F.20
SP92793
HP All-in-One 24-exxx (ROM Family SSID 81BA)
F.47
SP93314
HP All-in-One 24-exxx (ROM Family SSID 81BB)
F.51
SP93094
HP All-in-One 24-exxx (ROM Family SSID 82DD)
F.18
SP92658
HP All-in-One 24-exxx (ROM Family SSID 8304)
F.36
SP93285
HP All-in-One 24-f0xxx (ROM Family SSID 8431)
F.20
SP92781
HP All-in-One 24-f0xxx (ROM Family SSID 8446)
F.10
SP92652
HP All-in-One 24-fxxxx (ROM Family SSID 8430)
F.20
SP92793
HP All-in-One 24-gxxx (ROM Family SSID 81BA)
F.47
SP93314
HP All-in-One 24-gxxx (ROM Family SSID 81BB)
F.51
SP93094
HP All-in-One 24-gxxx (ROM Family SSID 82DD)
F.18
SP92658
HP All-in-One 24-gxxx (ROM Family SSID 8304)
F.36
SP93285
HP Envy 13-d000 ~ 13-d099
F.51
SP93076
HP Envy 13-d100 ~ 13-d199
F.51
SP93076
HP Envy 13t-d000 ~ 13t-d099
F.51
SP93076
HP Envy 13t-d100 ~ 13t-d199
F.51
SP93076
HP Envy 14-j100 ~ 14-j199
F.51
SP93076
HP Envy 14t-j100
F.51
SP93076
HP Envy 15-ae100 ~ 15-ae199
F.51
SP93076
HP ENVY 15-ah100 ~ 15-ah199
Not Available
Not Available
Not Available
HP Envy 15-k300 - 15-k399
F.57
SP92961
HP Envy 15t-ae100 ~ 15t-ae199
F.51
SP93076
HP ENVY 15t-u400 x360
F.1F
SP92986
HP Envy 17-k200 - 17-k299
F.57
SP92961
HP Envy 17-n100 ~ 17-n199
F.51
SP93076
HP Envy 17-r100 ~ 17-r199
F.51
SP93076
HP Envy 17t-k200
F.57
SP92961
HP Envy 17t-n100
F.51
SP93076
HP ENVY 27-b2XX (ROM Family SSID 8419)
F.50
SP92667
HP ENVY 27-b2XX (ROM Family SSID 8419)
F.50
SP92667
HP ENVY All-in-One 27-b1xx (ROM Family SSID 82F3)
F.32
SP92486
HP ENVY All-in-One 34-axxx (ROM Family SSID 2B4C)
A0.14
SP93315
HP ENVY Curved All-in-One 34-b0xx (ROM Family SSID 826A)
F.32
SP92487
HP ENVY Desktop 795-0xxx (ROM Family SSID 844C)
F.20
SP93107
HP ENVY m6-p100 ~ m6-p199
Not Available
Not Available
Not Available
HP ENVY m7 Notebook u000~u099
F.33
SP92438
HP Envy m7-k200 - m7-k299
F.57
SP92961
HP ENVY Notebook 15-as000-as099
F.33
SP92438
HP ENVY Notebook 15t-as00
F.33
SP92438
HP ENVY Notebook 17-s000 ~ s099
F.94
SP92396
HP ENVY Notebook 17-s100 ~ s199
F.94
SP92396
HP ENVY Notebook 17t-s000
F.94
SP92396
HP ENVY Notebook 17t-s100
F.94
SP92396
HP ENVY Notebook 17t-u000
F.33
SP92438
HP ENVY Notebook 17-u000-u099
F.33
SP92438
HP ENVY Notebook15-q400~15-q499
F.25
SP92954
HP ENVY x360 15-bq0xx
F.10
sp93122
HP ENVY x360 15-bq2xx
F.03
sp92940
HP ENVY x360 15-w1XX
F.35
sp92750
HP ENVY x360 Convertible 15-aq0xx, 15t-aq000
F.57
SP93270
HP ENVY x360 Convertible 15-cp0xxx
F.32
SP93294
HP ENVY x360 Convertible 15m-bq2xx
F.03
sp92940
HP ENVY x360 Convertible 15m-cp0xxx
F.32
SP93294
HP ENVY x360 m6-bq0xx
F.10
sp93122
HP ENVY x360 m6-w1xx
F.35
sp92750
HP Laptop 14-bs1xx, 14-bs6xx, 14t-bs100, 14t-bs600, 14g-br1xx, 14q-bu1xx
F.43
SP93355
HP Laptop 14-bs2xx
F.43
SP93355
HP Laptop 14g-br2xx
F.43
SP93355
HP Laptop 14q-bu2xx
F.43
SP93355
HP Laptop 15-bs0xx, 15-bs0xx , 15-bs5xx , 15-bs6xx, 15g-br0xx, 15q-bu0xx, 15-ra0xx
F.51
SP93384
HP Laptop 15-bs1xx, 15-bs7xx, 15t-bs100, 15t-bs700, 15g-br1xx, 15q-bu1xx
F.51
SP93384
HP Laptop 15-da0xxx
F.07
SP92962
HP Laptop 15g-dr0xxx
F.07
SP92962
HP Laptop 15q-ds0xxx
F.07
SP92962
HP Laptop 17-by0xxx
F.33
SP95067
HP Laptop 17g-cr0xxx
F.33
SP95067
HP Laptop 17q-cs0xxx
F.33
SP95067
HP Notebook 11-f0XX
Not Available
Not Available
Not Available
HP Notebook 15-ay000 ~ 15-ay099 (WW/China & India LFR)
F.46
SP93166
HP Notebook 15-ay100 ~ 15-ay199, (WW/China & India LFR)
F.46
SP93166
HP Notebook 15-ay500 to 15-ay599 (WW/China & India LFR)
F.46
SP93166
HP Notebook 15-ay600 - 15-ay699 (WW/China & India LFR)
F.46
SP93166
HP Notebook 15-bd000 ~ 15-bd099 (China & India IT Mall)
F.46
SP93166
HP Notebook 15-bd100 ~ 15-bd199 (China & India IT Mall)
F.46
SP93166
HP Notebook 15-be000 ~ 15-be099 (China & India OLS)
F.46
SP93166
HP Notebook 15-be100 ~ 15-be199 (China & India OLS)
F.46
SP93166
HP Notebook 15-bn000 ~ 15-bn099 (Camo edition)
F.46
SP93166
HP Notebook 15-f0xx
F.42
sp92739
HP Notebook 15-f1xx
F.42
sp92739
HP Notebook 15t-ay000
F.46
SP93166
HP Notebook 15t-ay100
F.46
SP93166
HP OMEN 875-0xxx (ROM Family SSID 84EE)
F.10
SP92914
HP OMEN 875-0xxx (ROM Family SSID 84FD)
F.11
SP92947
HP OMEN 880-1xx (ROM Family SSID 84F6)
F.20
SP93224
HP OMEN 880-xxx (ROM Family SSID 8309)
F.22
SP92405
HP Pavilion 14-al000~14-al099
F.50
SP93111
HP Pavilion 14-av001 ~ 14-av099
F.29
Sp93005
HP Pavilion 14t-al000
F.50
SP93111
HP Pavilion 14t-v000
F.57
SP92961
HP Pavilion 14t-v100
F.57
SP92961
HP Pavilion 14t-v200
F.57
SP92961
HP Pavilion 14-v000~14-v099
F.57
SP92961
HP Pavilion 14-v100~14-v199
F.57
SP92961
HP Pavilion 14-v200~14-v299
F.57
SP92961
HP Pavilion 15-au000~15-au099
F.50
SP93111
HP Pavilion 15-au500~15-au599
F.50
SP93111
HP Pavilion 15-bc000~15-bc099
F.50
SP93111
HP Pavilion 15-dp0xxx
F.03
SP93239
HP Pavilion 15-p000~15-p099
F.57
SP92961
HP Pavilion 15-p100~15-p199
F.57
SP92961
HP Pavilion 15-p300~15-p399
F.57
SP92961
HP Pavilion 15-p500~15-p599
F.57
SP92961
HP Pavilion 15-p700~15-p799
F.57
SP92961
HP Pavilion 15t-au000
F.50
SP93111
HP Pavilion 15t-bc000
F.50
SP93111
HP Pavilion 15t-dp000
F.03
SP93239
HP Pavilion 15t-p000
F.57
SP92961
HP Pavilion 15t-p100
F.57
SP92961
HP Pavilion 15t-p300
F.57
SP92961
HP Pavilion 17-ab001~ 17-ab099
F.50
SP93111
HP Pavilion 17-f000~17-f099
F.57
SP92961
HP Pavilion 17-f100~17-f199
F.57
SP92961
HP Pavilion 17t-ab001
F.50
SP93111
HP Pavilion 510-axxx (ROM Family SSID 821D)
F.46
SP92785
HP Pavilion 510-pxxx (ROM Family SSID 81B4)
F.38
SP92929
HP Pavilion 510-pxxx (ROM Family SSID 822A)
F.24
SP93287
HP Pavilion 570-axxx (ROM Family SSID 82F9)
F.28
SP92959
HP Pavilion 570-pxxx (ROM Family SSID 82F2)
F.35
SP92488
HP Pavilion 590-pxxxx (ROM Family SSID 8433)
F.20
SP92482
HP Pavilion All-in-One 24-axxx (ROM Family SSID 81B7)
F.47
SP93316
HP Pavilion All-in-One 24-axxx (ROM Family SSID 82DC)
F.33
SP93323
HP Pavilion All-in-One 24-b3XX (ROM Family SSID 8475)
F.08
SP93328
HP Pavilion All-in-One 24-bxxx (ROM Family SSID 81B7)
F.47
SP93316
HP Pavilion All-in-One 24-bxxx (ROM Family SSID 82DC)
F.33
SP93323
HP Pavilion All-in-One 24-qaxxx (ROM Family SSID 838B)
F.18
SP93328
HP Pavilion All-in-One 24-qxxx (ROM Family SSID 81B7)
F.47
SP93316
HP Pavilion All-in-One 24-qxxx (ROM Family SSID 82DC)
F.33
SP93323
HP Pavilion All-in-One 24-r1xx (ROM Family SSID 8448)
F.10
SP92784
HP Pavilion All-in-One 24-rxxx (ROM Family SSID 838B)
F.18
SP93328
HP Pavilion All-in-One 24-xa0xxx (ROM Family SSID 844E)
F.50
SP92668
HP Pavilion All-in-One 24-Xxxx (ROM Family SSID 838C)
F.18
SP93327
HP Pavilion All-in-One 27-axxx (ROM Family SSID 81B7)
F.47
SP93316
HP Pavilion All-in-One 27-axxx (ROM Family SSID 82DC)
F.33
SP93323
HP Pavilion All-in-One 27-qa1xx (ROM Family SSID 8448)
F.10
SP92784
HP Pavilion All-in-One 27-r1xx (ROM Family SSID 8448)
F.10
SP92784
HP Pavilion All-in-One 27-rxxx (ROM Family SSID 838B)
F.18
SP93328
HP Pavilion All-in-One 27-xa0xxx (ROM Family SSID 844E)
F.50
SP92668
HP Pavilion Desktop 590-a0xxx (ROM Family SSID 843B)
F.20
SP93061
HP Pavilion Desktop 590-a0xxx (ROM Family SSID 843C)
F.20
SP93063
HP Pavilion Desktop 590-a0xxx (ROM Family SSID 843E)
F.20
SP93273
HP Pavilion Desktop 590-p0xxx (ROM Family SSID 843B)
F.20
SP93061
HP Pavilion Desktop 590-p0xxx (ROM Family SSID 843C)
F.20
SP93063
HP Pavilion Desktop 590-p0xxx (ROM Family SSID 843E)
F.20
SP93273
HP Pavilion Desktop 595-p0xxx (ROM Family SSID 843B)
F.20
SP93061
HP Pavilion Desktop 595-p0xxx (ROM Family SSID 843C)
F.20
SP93063
HP Pavilion Desktop 595-p0xxx (ROM Family SSID 843E)
F.20
SP93273
HP Pavilion Gaming 15-cx0xxx
F.16
SP93010
HP Pavilion Gaming 790-0xxx (ROM Family SSID 844C)
F.20
SP93107
HP Pavilion Gaming Desktop 690-0xxx (ROM Family SSID 843B)
F.20
SP93061
HP Pavilion Notebook 14-ab100~ab199
F.89
SP92397
HP Pavilion Notebook 14t-ab100
F.89
SP92397
HP Pavilion Notebook 15-ab200~ab299
F.89
SP92397
HP Pavilion Notebook 15-ab500~ab599
F.89
SP92397
HP Pavilion Notebook 15-ak000~ak099
F.89
SP92397
HP Pavilion Notebook 15-bc200 ~ 15-bc299
F.50
SP93111
HP Pavilion Notebook 15-bj000~bj099
F.89
SP92397
HP Pavilion Notebook 15t-ab200
F.89
SP92397
HP Pavilion Notebook 15t-ab200
F.89
SP92397
HP Pavilion Notebook 15t-ak000
F.89
SP92397
HP Pavilion Notebook 15t-bj000
F.89
SP92397
HP Pavilion Notebook 17-g100~g199
F.89
SP92397
HP Pavilion Notebook 17t-g100
F.89
SP92397
HP Pavilion Power 580-xxx (ROM Family SSID 8437)
F.40
SP93286
HP Pavilion x2 10-n0XX
F.16
Sp92310
HP Pavilion x2 10-n1xx
F.19
SP92297
HP Pavilion x2 10t-n000
F.16
Sp92310
HP Pavilion x2 10t-n100
F.19
SP92297
HP Pavilion x360 11-ad1xx
F.22
SP93139
HP Pavilion x360 11m-ad1xx
F.22
SP93139
HP Pavilion x360 13-s100 ~13-s199
F.27
sp92744
HP Pavilion x360 15-bk000 ~ 15-bk099
F.26
SP92745
HP Pavilion x360 Convertible 11 11-k100~11-k199
F.60
SP93012
HP Pavilion x360 Convertible 11-ad000 ~ 11-ad099
F.44
SP93150
HP Pavilion x360 Convertible 11m-ad000 ~ 11m-ad099
F.44
SP93150
HP Pavilion x360 m1-u000~m1-u099
F.36
SP93272
HP Pavilion x360 m3-u100~m3-u199
F.36
SP93271
HP Slim Desktop 290-a0xxx (ROM Family SSID 843F)
F.20
SP93065
HP Slim Desktop 290-a0xxx (ROM Family SSID 8441)
F.20
SP93274
HP Slim Desktop 290-a0xxx (ROM Family SSID 84F4)
F.20
SP93453
HP Slim Desktop 290-p0xxx (ROM Family SSID 843F)
F.20
SP93065
HP Slim Desktop 290-p0xxx (ROM Family SSID 8441)
F.20
SP93274
HP Slim Desktop 290-p0xxx (ROM Family SSID 84F4)
F.20
SP93453
HP Slimline 260-axxx (ROM Family SSID 821D)
F.46
SP92785
HP Slimline 260-pxxx (ROM Family SSID 81B4)
F.38
SP92929
HP Slimline 270-axxx (ROM Family SSID 82F9)
F.28
SP92959
HP Slimline 270-pxxx (ROM Family SSID 82F2)
F.35
SP92488
HP Spectre 13-ak0xxx
F.13
sp93092
HP Spectre 13t-ak000
F.13
sp93092
HP Spectre Notebook 13-v000 ~ 13-v099
F.42
sp92400
HP Spectre x360 Convertible 13-ap0xxx
F.21
sp93428
HP Spectre x360 Convertible 13t-ap000
F.21
sp93428
HP Spectre x360 Convertible 15-df0xxx
F.21
sp93429
HP Spectre x360 Convertible 15t-df000
F.21
sp93429
HP Stream 11-ak0xxx
F.03
Not Available
Windows Update only
OMEN by HP 15-ax000~15-ax099
F.50
SP93111
OMEN by HP 15-ax100~15-ax199
F.50
SP93111
OMEN by HP 15t-ax000
F.50
SP93111
OMEN by HP 15t-ax100
F.50
SP93111
OMEN by HP 880-xxx (ROM Family SSID 8307)
F.13
SP93350
OMEN by HP 880-xxx (ROM Family SSID 8308)
F.13
SP93352
OMEN by HP 880-xxx (ROM Family SSID 8437)
F.40
SP93286
OMEN by HP Laptop 17t-w000
F.50
SP93111
OMEN by HP Laptop 17t-w100
F.50
SP93111
OMEN by HP Laptop 17-w001~ 17-w099
F.50
SP93111
OMEN by HP Laptop 17-w101~ 17-w199
F.50
SP93111
OMEN X by HP 900-0xx (ROM Family SSID 81B6)
F.24
SP93371
OMEN X by HP 900-xxx (ROM Family SSID 81B6)
F.27
SP93372
OMEN X by HP 900-xxx (ROM Family SSID 8268)
F.16
SP93373
Star WarsTM Special Edition 15-an000-an099
F.89
SP92397
Star WarsTM Special Edition 15t-an000
F.89
SP92397

Desktop Workstation PCs

Pending: Softpaq is in progress.
Under Investigation: Softpaq is being investigated for feasibility and availability.
Not Available: Softpaq not available due to technical or logistical constraints.
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit https://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://www.hp.com/go/alerts.
Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
PI
HP Printing and Imaging
HF
HP Hardware and Firmware
GN
HP General Software
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISION HISTORY : Version 1 – 09 October 2018: Initial release. Version 2 -- 26 October 2018: Added affected platforms for commercial PC and consumer PC. Version 3 - 31 October 2018: Added updates for Immersive, Commercial PC and Desktop Workstations. Version 4 - 10 December 2018: Added updates for Retail systems, Commercial and Consumer PC systems. Added legend for platform list; Version 5 - 25 January 2018: Added updates for Commercial and Consumer PC systems. Version 6 - 23 April 2019: Added updates for Immersive, Commercial, and Consumer PC systems.

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.