solution Contentsolution Content

SUPPORT COMMUNICATION- SECURITY BULLETIN

Document ID: c05792935

Version: 11

HPSBHF03568 rev. 11 - Infineon TPM Security Update

Notice: The information in this security bulletin should be acted upon as soon as possible.

Release date : 09-Oct-2017

Last updated : 20-Nov-2018

Potential Security Impact:
Potential loss of confidentiality
Source: Infineon

VULNERABILITY SUMMARY
A security vulnerability was identified in the RSA key generation method used by TPM products listed below. This leaves the keys potentially vulnerable via targeted, computationally expensive attacks. These RSA keys generated by the TPM are used with certain software products and should not be considered secure. Updated TPM firmware versions which enable more secure key generation are listed in the RESOLUTION section for the following dedicated TPM products.
  • SLB 9670 (TPM 2.0), Versions: 7.40, 7.41, 7.60, 7.61
  • SLB 9670 (TPM 1.2), Versions: 6.40, 6.41, 6.42
  • SLB 9665 (TPM 2.0), Versions: 5.00, 5.40, 5.50, 5.51, 5.60, 5.61
  • SLB 9660 (TPM 1.2), Versions: 4.40, 4.42
  • SLB 9656 (TPM 1.2), Versions: 4.30, 4.31, 4.32, 4.33
note:
SLB 9635 (TPM 1.2) is not affected.
Reference Number
CVE-2017-15361, PSR-2017-0143
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
See the RESOLUTION section for impacted products.
BACKGROUND
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com
CVSS 3.0 Base Metrics
Reference
Base Vector
Base Score
CVE-2017-15361
5.9
Information on CVSS is documented in HP Customer Notice: HPSN­2008­002.
RESOLUTION
HP has provided the following updates for Infineon Trusted Platform Module. Download and run the Softpaq to extract files. By default, the files will be extracted to the C:\SWSETUP folder. Navigate to the folder with the relevant Softpaq number and open the pdf file for further instructions and details. For details on the impact of this firmware update for Windows software such as BitLocker see the following Microsoft advisory: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012.

Commercial Notebooks, Mobile Thin Clients, Mobile Workstations

Product Name
Updated version(s)
Softpaq#
Softpaq Link
HP Chromebook 11 G4 EE
SLB9660 TPM 1.2 ver. 4.43.257.0
Chrome OS installer
HP Chromebook 11 G5
SLB9660 TPM 1.2 ver. 4.43.257.0
Chrome OS installer
HP Chromebook 11 G5 EE
SLB9660 TPM 1.2 ver. 4.43.257.0
Chrome OS installer
HP Chromebook 13 G1
SLB9670 TPM 2.0 ver. 6.43.243.0
Chrome OS installer
HP Chromebook 14 G4
SLB9660 TPM 1.2 ver. 4.43.257.0
Chrome OS installer
HP Elite x2 1011 G1 Tablet
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP Elite x2 1012 G1 Tablet
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Elite x2 1012 G1 Tablet
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP Elite x2 1012 G2 Tablet
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 1020 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 1030 G1
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 1030 G1
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 1040 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 1040 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 1040 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 1040 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 612 G1
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 720 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook 720 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 725 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 725 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 725 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 725 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 725 G4
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 740 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook 740 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 745 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 745 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 745 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 745 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 745 G4
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 750 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook 750 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 755 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 755 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 755 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 755 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 755 G4
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 820 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook 820 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 820/828 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 820/828 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 820/828 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 840 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook 840 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 840 G2 Notebook PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 840/848 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 840/848 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 840/848 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 850 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook 850 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 850 G2 Notebook PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook 850 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook 850 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook 850 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook Folio 1040 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook Folio 9480m
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook Folio G1
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook Folio G1
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteBook Revolve 810 G2
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteBook Revolve 810 G3
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteBook x360 1020 G2 Notebook PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteBook x360 1030 G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ElitePad 1000 G2
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP mt20 Mobile Thin Client
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP mt21 Mobile Thin Client
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP mt40 Mobile Thin Client
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP mt41 Mobile Thin Client
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP mt42 Mobile Thin Client
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP mt42 Mobile Thin Client
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP mt43 Mobile Thin Client
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP mt43 Mobile Thin Client
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP Pro Tablet 608 G1
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP Pro x2 612 G1
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP Pro x2 612 G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 11 EE G1
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProBook 11 G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 11 G2
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 430 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 430 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProBook 430 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 430 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 430 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 430 G5
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 440 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 440 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProBook 440 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 440 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 440 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 440 G5
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 445 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 445 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProBook 450 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 450 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProBook 450 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 450 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 450 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 450 G5
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 455 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 455 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProBook 455 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 455 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 455 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 470 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 470 G2
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProBook 470 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 470 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 470 G4
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 470 G5
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 640 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 640 G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 640 G2
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 640 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 645 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 645 G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 645 G2
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 645 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 645 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 650 G1
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProBook 650 G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 650 G2
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 650 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 650 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 655 G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 655 G2
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook 655 G3
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook 655 G3
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProBook x360 11 G1 EE
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProBook x360 11 G2 EE
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400 G2.5 Business SFF DT
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP Spectre Pro 13 G1
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84076
HP Spectre Pro x360 G2
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84226
HP Stream 11 Pro G2
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84457
HP Stream 11 Pro G3
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP85336
HP Stream 11 Pro G4 EE
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84613
HP Stream 14 Pro G3
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84422
HP ZBook 14 G2 Mobile Workstation
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ZBook 14u G4 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook 15 G2 Mobile Workstation
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ZBook 15 G3 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook 15 G3 Mobile Workstation
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ZBook 15 G4 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook 15 Mobile Workstation
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ZBook 15u G2 Mobile Workstation
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ZBook 15u G3 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook 15u G3 Mobile Workstation
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ZBook 15u G4 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook 17 G2 Mobile Workstation
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ZBook 17 G3 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook 17 G3 Mobile Workstation
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ZBook 17 G4 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook 17 Mobile Workstation
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ZBook Studio G3 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook Studio G3 Mobile Workstation
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ZBook Studio G4 Mobile Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ZBook X2 G4 Detachable Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Zhan 66 Pro G1
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753

Immersive Systems

Product Name
Updated Version(s)
SoftPaq#
Softpaq Link
Sprout Pro by HP
SLB9670 TPM 1.2 ver 6.43.243.0
SP82132
Sprout Pro by HP G2
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87578

Commercial Desktops, Thin Clients, and Retail Systems

Product Name
Updated Version(s)
SoftPaq#
Softpaq Link
HP 260 G1 Desktop Mini PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP 260 G2 Desktop Mini PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP 280 G1 MT Business PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP 280 G2 MT Business PC
SLB9670 TPM 1.2 ver. 6.43.243.0
SP82132
HP 285 Pro G1 MT Business PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP 285 Pro G2 MT Business PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP 406 G1 MT Business PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP 406 G2 MT Business PC
SLB9670 TPM 1.2 ver. 6.43.243.0
SP82132
HP Elite Slice
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Elite Slice
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 700 G1 Microtower PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteDesk 700 G1 Small Form Factor PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteDesk 705 G1 Desktop Mini PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteDesk 705 G1 Microtower PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteDesk 705 G1 Small Form Factor PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteDesk 705 G2 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 705 G2 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 705 G2 Microtower PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteDesk 705 G2 Small Form Factor PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteDesk 705 G3 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 705 G3 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 705 G3 Microtower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 705 G3 Microtower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 705 G3 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 705 G3 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 800 G1 Desktop Mini PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteDesk 800 G2 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 800 G2 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 800 G1 Small Form Factor PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteDesk 800 G2 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 800 G2 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 800 G3 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 800 G3 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 800 G3 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 800 G3 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 800 G1 Ultra-slim PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteDesk 800/880 G1 Tower PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteDesk 800/880 G2 Tower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 800/880 G2 Tower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteDesk 800/880 G3 Tower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteDesk 800/880 G3 Tower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteOne 1000 G1 23.8-in All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteOne 1000 G1 23.8-in All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteOne 1000 G1 23.8-in Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteOne 1000 G1 23.8-in Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteOne 1000 G1 27-in Touch 4K UHD All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteOne 1000 G1 27-in Touch 4K UHD All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteOne 705 G1 21-inch Non-Touch All-in-One PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteOne 705 G2 23-inch Touch All-in-One PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP EliteOne 800 G1 21.5-inch Non-Touch All-in-One PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteOne 800 All-in-One PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP EliteOne 800 G2 23-inch Non-Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteOne 800 G2 23-inch Non-Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteOne 800 G2 23-inch Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteOne 800 G2 23-inch Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteOne 800 G3 23.8-inch Non-Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteOne 800 G3 23.8-inch Non-Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP EliteOne 800 G3 23.8-inch Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP EliteOne 800 G3 23.8-inch Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ElitePOS G1 Retail System Model 141
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ElitePOS G1 Retail System Model 141
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ElitePOS G1 Retail System Model 143
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ElitePOS G1 Retail System Model 143
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ElitePOS G1 Retail System Model 145
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ElitePOS G1 Retail System Model 145
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP MP9 G2 Retail System
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP MP9 G2 Retail System
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP MP9 G2 Retail System Model 9000
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProDesk 400 G1 Desktop Mini PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProDesk 400 G2 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400 G2 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 400 G2 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400 G2 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 400 G3 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400 G3 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 400 G3 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400 G3 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 400 G4 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400 G4 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 400/480 G1 Small Form Factor PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProDesk 400/480 G2 Microtower PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProDesk 400/480 G3 Microtower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400/480 G3 Microtower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 400/480 G4 Microtower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 400/480 G4 Microtower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 400/490/498 G1 Microtower PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProDesk 405 G2 Microtower PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProDesk 485 G2 Microtower PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProDesk 490/498 G2 Microtower PC
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP ProDesk 490/498 G3 Microtower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 490/498 G3 Microtower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 600 G1 Desktop Mini PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProDesk 600 G2 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 600 G2 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 600 G1 Small Form Factor PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProDesk 600 G2 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 600 G2 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 600 G3 Desktop Mini PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 600 G3 Desktop Mini PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 600 G3 Small Form Factor PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 600 G3 Small Form Factor PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 600/680 G1 Tower PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProDesk 600/680 G2 Microtower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 600/680 G2 Microtower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProDesk 600/680 G3 Microtower PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProDesk 600/680 G3 Microtower PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProOne 400 G1 19.5-inch Non-Touch All-in-One PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProOne 400 G1 21.5-inch Touch All-in-One
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProOne 400 G1 23-inch Non-Touch All-in-One
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProOne 400 G2 20-inch Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProOne 400 G2 20-inch Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProOne 400 G3 All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProOne 400 G3 All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProOne 400/460/480 G2 20-inch Non-Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProOne 400/460/480 G2 20-inch Non-Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProOne 600 G1 All-in-One PC
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP ProOne 600 G2 21.5-inch Non-Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProOne 600 G2 21.5-inch Non-Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProOne 600 G2 21.5-inch Touch All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProOne 600 G2 21.5-inch Touch All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP ProOne 600 G3 All-in-One PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP ProOne 600 G3 All-in-One PC
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP RP5 Retail System Model 5810
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP RP9 G1 AiO Retail System Model 9015
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP RP9 G1 AiO Retail System Model 9015
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP RP9 G1 AiO Retail System Model 9018
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP RP9 G1 AiO Retail System Model 9018
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP t530 Thin Client
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP t530 Thin Client
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84096
HP t620 Flexible Thin Client
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP t620 PLUS Flexible Thin Client
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP t630 Thin Client
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP t630 Thin Client
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84096
HP t730 Thin Client
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP t730 Thin Client
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84096
HP t820 Flexible Thin Client
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP Z VR Backpack G1
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753

Workstation Desktops

Product Name
Updated Version(s)
SoftPaq#
Softpaq Link
HP Z1 G3 Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Z2 Mini G3 Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Z228 Microtower Workstation
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP Z230 MT Workstation
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP Z230 SFF Workstation
SLB9656 TPM1.2 ver. 4.34.1011.0
SP82407
HP Z238 Microtower Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Z238 Microtower Workstation
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP Z240 SFF Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Z240 SFF Workstation
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP Z240 Tower Workstation
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
HP Z240 Tower Workstation
SLB9670 TPM 1.2 ver. 6.43.245.0
SP87753
HP Z440 Workstation
SLB9660 TPM 1.2 ver. 4.43.257.0
SP87753
HP Z440 Workstation
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP87753
HP Z640 Workstation
SLB9660 TPM 1.2 ver. 4.43.257.0
SP87753
HP Z640 Workstation
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP87753
HP Z840 Workstation
SLB9660 TPM 1.2 ver. 4.43.257.0
SP87753
HP Z840 Workstation
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP87753

Consumer Notebooks

Product Name
Updated Version(s)
SoftPaq#
Softpaq Link
HP Spectre 13 Laptop PC (models 13-af0xx)
SLB9665 TPM 2.0 ver. 5.62.3126.0
Not impacted
Not impacted
HP Spectre x360 Convertible (models 13-ac000 ~ 13-ac099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84209
HP Spectre Notebook PC (models 13-v000 ~ 13-v099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84076
HP Spectre Notebook PC (models 13-v100 ~ 13-v199)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84076
HP Spectre x2 12 Detachable PC (models 12-c000~12c-c099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84203
HP Spectre x2 Detachable PC (models 12-a000 ~ a099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP87768
HP Spectre x360 13 Convertible PC (models 13-ae0xx)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84186
HP Spectre x360 Convertible PC (models 13-4000 ~ 4099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP82133
HP Spectre x360 Convertible PC (models 13-4100 ~ 4199)
SLB9660 TPM 1.2 ver. 4.43.257.0
SP82133
HP Spectre x360 Convertible PC (models 13-4100 ~ 4199)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84318
HP Spectre x360 Convertible PC (models 13-4200 ~ 4299)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84318
HP Spectrex360 Convertible PC (models 13-w000 ~ 13-w099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84209
HP Spectrex360 Convertible PC (models 15-ap000-15ap099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84796
HP Spectrex360 Convertible PC (models 15-bl000 ~ 15-bl099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84221
HP Spectrex360 Convertible PC (models 15-bl100 ~ 15-bl199)
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP84221
OMEN X by HP 17 Laptop PC (models 17-ap000 ~ 17-ap099)
SLB9665 TPM 2.0 ver. 5.62.3126.0
Not impacted
Not impacted

Consumer Desktop

Product Name
Updated Version(s)
SoftPaq#
Softpaq Link
HP OMEN Notebook PC 15-5000 ~ 5099
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP85696
HP OMEN Notebook PC 15-5100 ~ 5199
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP85696
HP OMEN Notebook PC 15-5200 ~ 5299
SLB9665 TPM 2.0 ver. 5.62.3126.0
SP85696
OMEN X by HP Desktop PC
SLB9670 TPM 2.0 ver. 7.63.3353.0
SP87753
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit https://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://www.hp.com/go/alerts.
Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
PI
HP Printing and Imaging
HF
HP Hardware and Firmware
GN
HP General Software
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISION HISTORY : Version 1: 9 October 2017 Initial release; Version 2: 16 October 2017 Updates to vulnerability summary, background, resolution information, and product lists; Version 3: 26 Oct 2017 Updates to vulnerability summary and product lists; Version 4: 20 November 2017 added SP82407; Version 5: 5 December 2017 Added SP82407; Version 6: 23 February 2018: Updated various TBD items, added CVE number; version 7: Updated softpaq numbers; Version 8: 13 June 2018: Updated softpaq numbers and added new products. Version 9: 29 June 2018 - Updated Softpaq numbers and added new product. Version 10: 14 September 2018 - Added Immersive PC products, updated platform list headings. Version 11: 20 November 2018 - Added additional Commercial PC products.

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.