solution Contentsolution Content

SUPPORT COMMUNICATION- SECURITY BULLETIN

Document ID: c06560700

Version: 4

HPSBHF03651 rev. 4 - Intel® CSME February 2020 Security Update

Notice: The information in this security bulletin should be acted upon as soon as possible.

Release date : 10-Feb-2020

Last updated : 02-Oct-2020

Potential Security Impact:
Escalation of Privilege, Denial of Service, and Information Disclosure.
Source: HP, HP Product Security Response Team (PSRT)
Reported by: Intel®

VULNERABILITY SUMMARY
HP has been notified of potential security vulnerabilities involving improper authentication with the Intel CSME subsystem for certain Intel products. Intel CSME FW versions before 12.0.49, 12.0.55, 13.0.21, and 14.0.11 may allow a privileged user to potentially enable escalation of privilege, denial of service, or information disclosure via local access.
Reference Number
INTEL-SA-00307 (in English): CVE-2019-14598; PSR-2020-0025
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
See the RESOLUTION section for a list of impacted products.
BACKGROUND
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com
CVSS 3.1 Base Metrics
Reference
Base Vector
Base Score
CVE-2019-14598
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
8.2
RESOLUTION
Intel has released updates to mitigate the potential vulnerability. HP has identified the affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerability. See the affected platforms listed below.
Newer versions may become available and identified minimum versions may become obsolete. If a SoftPaq Link becomes invalid, check the HP Customer Support - Software and Driver Downloads site to obtain the latest update for your product model.
HP recommends keeping your system up to date with the latest firmware and software.
Sign up for HP Subscriptions and get notifications for:
  • Product support eAlerts
  • Driver updates
  • Security bulletin updates
Check support page: The listed SoftPaq has been removed from download site. SoftPaqs with newer versions may be available on the HP Customer Support - Software and Driver Downloads site.

Business PCs

Business desktops
Product Name
Component Type
Updated Version
SoftPaq #
SoftPaq Link
HP Desktop Pro
Firmware
12.0.45.1509
SP101201
HP Desktop Pro
Driver
1914.12.0.1256
SP101002
HP EliteDesk 800 G4 DM
Firmware
12.0.49.1534
SP101022
HP EliteDesk 800 G4 DM
Driver
1946.12.0.1328
SP100992
HP EliteDesk 800 G4 SFF
Firmware
12.0.49.1534
SP101149
HP EliteDesk 800 G4 SFF
Driver
1946.12.0.1328
SP100992
HP EliteDesk 800 G4 TWR
Firmware
12.0.49.1534
SP101149
HP EliteDesk 800 G4 TWR
Driver
1946.12.0.1328
SP100992
HP EliteDesk 800 G4 TWR WKS
Firmware
12.0.49.1534
SP101149
HP EliteDesk 800 G4 TWR WKS
Driver
1946.12.0.1328
SP100992
HP EliteDesk 800 G5 DM
Firmware
12.0.49.1534
SP101126
HP EliteDesk 800 G5 DM
Driver
1946.12.0.1328
SP101000
HP EliteDesk 800 G5 SFF
Firmware
12.0.49.1534
SP101143
HP EliteDesk 800 G5 SFF
Driver
1946.12.0.1328
SP101000
HP EliteDesk 800 G5 TWR
Firmware
12.0.49.1534
SP101143
HP EliteDesk 800 G5 TWR
Driver
1946.12.0.1328
SP101000
HP EliteDesk 880 G4 TWR
Firmware
12.0.49.1534
SP101149
HP EliteDesk 880 G4 TWR
Driver
1946.12.0.1328
SP100992
HP EliteDesk 880 G5 TWR
Firmware
12.0.49.1534
SP101143
HP EliteDesk 880 G5 TWR
Driver
1946.12.0.1328
SP101000
HP EliteOne 1000 G2 All-in-One
Firmware
12.0.49.1534
SP101065
HP EliteOne 1000 G2 All-in-One
Driver
1946.12.0.1328
SP100992
HP EliteOne 800 G4 All-in-One
Firmware
12.0.49.1534
SP101183
HP EliteOne 800 G4 All-in-One
Driver
1946.12.0.1328
SP100992
HP EliteOne 800 G4 GPU All-in-One
Firmware
12.0.49.1534
SP101183
HP EliteOne 800 G4 GPU All-in-One
Driver
1946.12.0.1328
SP100992
HP EliteOne 800 G5
Firmware
12.0.49.1534
SP101120
HP EliteOne 800 G5
Driver
1946.12.0.1328
SP101000
HP ProDesk 400 G4 DM
Firmware
12.0.49.1534
SP101068
HP ProDesk 400 G4 DM
Driver
1946.12.0.1328
SP100990
HP ProDesk 400 G5 DM
Firmware
12.0.49.1534
SP101128
HP ProDesk 400 G5 DM
Driver
1946.12.0.1328
SP100956
HP ProDesk 400 G5 MT
Firmware
12.0.49.1534
SP101151
HP ProDesk 400 G5 MT
Driver
1946.12.0.1328
SP100990
HP ProDesk 400 G5 SFF
Firmware
12.0.49.1534
SP101153
HP ProDesk 400 G5 SFF
Driver
1946.12.0.1328
SP100990
HP ProDesk 400 G6 MT
Firmware
12.0.49.1534
SP101145
HP ProDesk 400 G6 MT
Driver
1946.12.0.1328
SP100956
HP ProDesk 400 G6 SFF
Firmware
12.0.49.1534
SP101148
HP ProDesk 400 G6 SFF
Driver
1946.12.0.1328
SP100956
HP ProDesk 480 G5 MT
Firmware
12.0.49.1534
SP101151
HP ProDesk 480 G5 MT
Driver
1946.12.0.1328
SP100990
HP ProDesk 480 G6 MT
Firmware
12.0.49.1534
SP101145
HP ProDesk 480 G6 MT
Driver
1946.12.0.1328
SP100956
HP ProDesk 600 G4 DM
Firmware
12.0.49.1534
SP101067
HP ProDesk 600 G4 DM
Driver
1946.12.0.1328
SP100992
HP ProDesk 600 G4 MT
Firmware
12.0.49.1534
SP101150
HP ProDesk 600 G4 MT
Driver
1946.12.0.1328
SP100992
HP ProDesk 600 G4 SFF
Firmware
12.0.49.1534
SP101152
HP ProDesk 600 G4 SFF
Driver
1946.12.0.1328
SP100992
HP ProDesk 600 G5 DM
Firmware
12.0.49.1534
SP101127
HP ProDesk 600 G5 DM
Driver
1946.12.0.1328
SP101000
HP ProDesk 600 G5 MT
Firmware
12.0.49.1534
SP101144
HP ProDesk 600 G5 MT
Driver
1946.12.0.1328
SP101000
HP ProDesk 600 G5 SFF
Firmware
12.0.49.1534
SP101255
HP ProDesk 600 G5 SFF
Driver
1946.12.0.1328
SP101000
HP ProDesk 680 G4 PCI MT
Firmware
12.0.49.1534
SP101150
HP ProDesk 680 G4 PCI MT
Driver
1946.12.0.1328
SP100992
HP ProDesk 680 G4 MT
Firmware
12.0.49.1534
SP101146
HP ProDesk 680 G4 MT
Driver
1946.12.0.1328
SP100992
HP ProOne 400 G4 AiO
Firmware
12.0.49.1534
SP101066
HP ProOne 400 G4 AiO
Driver
1946.12.0.1328
SP100992
HP ProOne 400 G5 AiO
Firmware
12.0.49.1534
SP101174
HP ProOne 400 G5 AiO
Driver
1946.12.0.1328
SP101000
HP ProOne 440 G4 AiO
Firmware
12.0.49.1534
SP101066
HP ProOne 440 G4 AiO
Driver
1946.12.0.1328
SP100992
HP ProOne 440 G5 AiO
Firmware
12.0.49.1534
SP101174
HP ProOne 440 G5 AiO
Driver
1946.12.0.1328
SP101000
HP ProOne 600 G4 AiO
Firmware
12.0.49.1534
SP101066
HP ProOne 600 G4 AiO
Driver
1946.12.0.1328
SP100992
HP ProOne 600 G5 AiO
Firmware
12.0.49.1534
SP101174
HP ProOne 600 G5 AiO
Driver
1946.12.0.1328
SP101000
note:
For products in the following table, CSME firmware updates are contained in the BIOS update.
Product Name
Updated Version
SoftPaq
SoftPaq Link
HP 200 G4 22 All-in-One PC (ROM Family SSID 86F8)
F.11
SP104221
HP 200 Pro G4 22 All-in-One PC (ROM Family SSID 86F8)
F.11
SP104221
HP 205 G4 22 All-in-One PC (ROM Family SSID 86F8)
F.11
SP104221
HP 205 Pro G4 22 All-in-One PC (ROM Family SSID 86F8)
F.11
SP104221
HP 280 G3 (ROM Family SSID 843F)
F.43
SP106187
HP 280 G4 (ROM Family SSID 86E9)
F.21
SP106193
HP 280 G4 (ROM Family SSID 8768)
F.12
SP106059
HP 280 G4 MT Business PC (ROM Family SSID 843C)
F.43
SP106184
HP 280 G5 (ROM Family SSID 86E9)
F.21
SP106193
HP 280 G5 (ROM Family SSID 877E)
F.10
SP105984
HP 280 Pro G3 (ROM Family SSID 843F)
F.43
SP106187
HP 280 Pro G4 MT Business PC (ROM Family SSID 843C)
F.43
SP106184
HP 282 G5 (ROM Family SSID 86E9)
F.21
SP106193
HP 282 G5 (ROM Family SSID 877E)
F.10
SP105984
HP 282 Pro G4 MT Business PC (ROM Family SSID 843C)
F.43
SP106184
HP 288 G5 (ROM Family SSID 86E9)
F.21
SP106193
HP 288 G5 (ROM Family SSID 877E)
F.10
SP105984
HP 288 Pro G4 MT Business PC (ROM Family SSID 843C)
F.43
SP106184
HP 290 G1 (ROM Family SSID 843F)
F.43
SP106187
HP 290 G2 (ROM Family SSID 86E9)
F.21
SP106193
HP 290 G2 (ROM Family SSID 8768)
F.12
SP106059
HP 290 G2 MT Business PC (ROM Family SSID 843C)
F.43
SP106184
HP 290 G3 (ROM Family SSID 86E9)
F.21
SP106193
HP 290 G3 (ROM Family SSID 877E)
F.10
SP105984
HP Desktop Pro G1 MT (ROM Family SSID 843C)
F.43
SP106184
HP Zhan 86 Pro G2 MT Business PC (ROM Family SSID 843C)
F.43
SP106184
HP ZHAN 99 Pro G1 MT (ROM Family SSID 843C)
F.43
SP106184
Business notebooks
Product Name
Component Type
Updated Version
SoftPaq #
SoftPaq Link
HP Elite x2 G4
Firmware
12.0.49.1534
SP101379
HP Elite x2 G4
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook 1050 G1
Firmware
12.0.49.1534
SP101278
HP EliteBook 1050 G1
Driver
1946.12.0.1328 - A - 1
SP101070
HP EliteBook 830 G6
Firmware
12.0.49.1534
SP101245
HP EliteBook 830 G6
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook 836 G6
Firmware
12.0.49.1534
SP101245
HP EliteBook 836 G6
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook 840 G6
Firmware
12.0.49.1534
SP101245
HP EliteBook 840 G6
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook 840 G6 Healthcare Edition
Firmware
12.0.49.1534
SP101245
HP EliteBook 840 G6 Healthcare Edition
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook 846 G6
Firmware
12.0.49.1534
SP101245
HP EliteBook 846 G6
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook 846 G6 Healthcare Edition
Firmware
12.0.49.1534
SP101245
HP EliteBook 846 G6 Healthcare Edition
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook 850 G6
Firmware
12.0.49.1534
SP101245
HP EliteBook 850 G6
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook x360 1030 G4
Firmware
12.0.49.1534
SP101274
HP EliteBook x360 1030 G4
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook x360 1040 G6
Firmware
12.0.49.1534
SP101318
HP EliteBook x360 1040 G6
Driver
1946.12.0.1328,W,1
SP101055
HP EliteBook x360 830 G6
Firmware
12.0.49.1534
SP101247
HP EliteBook x360 830 G6
Driver
1946.12.0.1328,W,1
SP101055
HP ProBook 430 G6
Firmware
12.0.49.1534
SP101220
HP ProBook 430 G6
Driver
1946.12.0.1328 - A - 1
SP101075
HP ProBook 430 G7
Firmware
14.0.11.1205
Check support page
HP ProBook 430 G7
Driver
1944.14.0.1371
SP101231
HP ProBook 440 G6
Firmware
12.0.49.1534
SP101220
HP ProBook 440 G6
Driver
1946.12.0.1328 - A - 1
SP101075
HP ProBook 440 G7
Firmware
14.0.11.1205
Check support page
HP ProBook 440 G7
Driver
1944.14.0.1371
SP101231
HP ProBook 450 G6
Firmware
12.0.49.1534
SP101220
HP ProBook 450 G6
Driver
1946.12.0.1328 - A - 1
SP101075
HP ProBook 450 G7
Firmware
14.0.11.1205
Check support page
HP ProBook 450 G7
Driver
1944.14.0.1371
SP101231
HP ProBook 640 G5
Firmware
12.0.49.1534
SP101246
HP ProBook 640 G5
Driver
1946.12.0.1328,W,1
SP101055
HP ProBook 650 G4
Firmware
12.0.49.1534
SP101301
HP ProBook 650 G4
Driver
1946.12.0.1328 - A - 1
SP101382
HP ProBook 650 G5
Firmware
12.0.49.1534
SP101246
HP ProBook 650 G5
Driver
1946.12.0.1328,W,1
SP101055
HP ZBook 14u G6
Firmware
12.0.49.1534
SP101245
HP ZBook 14u G6
Driver
1946.12.0.1328,W,1
SP101055
HP ZBook 15 G5
Firmware
12.0.49.1534
SP101276
HP ZBook 15 G5
Driver
1946.12.0.1328 - A - 1
SP101070
HP Zbook 15 G6
Firmware
12.0.49.1534
 SP101734
HP Zbook 15 G6
Driver
1946.12.0.1328,W,1
SP101055
HP ZBook 15u G6
Firmware
12.0.49.1534
SP101245
HP ZBook 15u G6
Driver
1946.12.0.1328,W,1
SP101055
HP ZBook 17 G5
Firmware
12.0.49.1534
SP101276
HP ZBook 17 G5
Driver
1946.12.0.1328 - A - 1
SP101070
HP Zbook 17 G6
Firmware
12.0.49.1534
SP101734
HP Zbook 17 G6
Driver
1946.12.0.1328,W,1
SP101055
HP ZBook Studio G5
Firmware
12.0.49.1534
SP101277
HP ZBook Studio G5
Driver
1946.12.0.1328 - A - 1
SP101070
HP ZBook Studio x360 G5
Firmware
12.0.49.1534
SP101277
HP ZBook Studio x360 G5
Driver
1946.12.0.1328 - A - 1
SP101070
HP ZHAN 66 Pro 13 G2
Firmware
12.0.49.1534
SP101221
HP ZHAN 66 Pro 13 G2
Driver
1946.12.0.1328 - A - 1
SP101075
HP ZHAN 66 Pro 14 G2
Firmware
12.0.49.1534
SP101221
HP ZHAN 66 Pro 14 G2
Driver
1946.12.0.1328 - A - 1
SP101075
HP ZHAN 66 Pro 14 G3
Firmware
14.0.11.1205
Check support page
HP ZHAN 66 Pro 14 G3
Driver
1944.14.0.1371
SP101231
HP ZHAN 66 Pro 15 G2
Firmware
12.0.49.1534
SP101221
HP ZHAN 66 Pro 15 G2
Driver
1946.12.0.1328 - A - 1
SP101075
HP ZHAN 66 Pro 15 G3
Firmware
14.0.11.1205
Check support page
HP ZHAN 66 Pro 15 G3
Driver
1944.14.0.1371
SP101231
HP ZHAN X 13 G2
Firmware
12.0.49.1534
SP101248
HP ZHAN X 13 G2
Driver
1946.12.0.1328,W,1
SP101055
note:
For products in the following table, CSME firmware updates are contained in the BIOS update.

Desktop Workstation PCs

Product Name
Updated Version
SoftPaq
SoftPaq Link
Z2 SFF G4 Workstation WIN 10
12.0.49.1534
SP101478
Z2 SFF G4 Workstation Linux
12.0.49.1534
SP101479
Z2 TWR G4 Workstation Win 10
12.0.49.1534
SP101478
Z2 TWR G4 Workstation Linux
12.0.49.1534
SP101479
Z2 Mini G4 Workstation Win 10
12.0.49.1534
SP101478
Z2 Mini G4 Workstation Linux
12.0.49.1534
SP101479

Retail Point of Sale systems

Product Name
Updated Version
SoftPaq
SoftPaq Link
HP Engage Flex Pro Retail System
12.0.49.1534
SP101069
HP Engage Flex Pro Retail System
1946.12.0.1328
SP100992
HP Engage Flex Pro-C Retail System
12.0.49.1534
SP101069
HP Engage Flex Pro-C Retail System
1946.12.0.1328
SP100992
HP MP9 G4
12.0.49.1534
SP101067
HP MP9 G4
1946.12.0.1328
SP100992

Home Notebook PCs

Product Name
Updated Version
SoftPaq #
SoftPaq Link
HP 14-dq0xxx
F.13
SP107411
HP 14-dq1xxx
F.13
SP107411
HP 14s-dq0xxx
F.13
SP107411
HP 14s-dq1xxx
F.13
SP107411
HP 14s-dr0xxx
F.13
SP107411
HP 14s-dr1xxx
F.13
SP107411
HP 14s-dy0xxx
F.13
SP107411
HP 14s-dy1xxx
F.13
SP107411
HP 14s-ef0xxx
F.08
SP105926
HP 14s-er0xxx
F.08
SP105926
HP 14s-es0xxx
F.08
SP105926
HP 14t-dq000
F.13
SP107411
HP 14t-dq100
F.13
SP107411
HP 15-da0xxx
F.30
SP105678
HP 15-da1xxx
F.30
SP105678
HP 15-da2xxx
F.30
SP105678
HP 15-dw0xxx
F.31
SP107533
HP 15-dw1xxx
F.31
SP107533
HP 15-dw2xxx
F.31
SP107533
HP 15-dy0xxx
F.13
SP107411
HP 15-dy1xxx
F.13
SP107411
HP 15g-dr0xxx
F.30
SP105678
HP 15g-dr1xxx
F.30
SP105678
HP 15g-dr2xxx
F.30
SP105678
HP 15q-ds0xxx
F.30
SP105678
HP 15q-ds1xxx
F.30
SP105678
HP 15q-ds2xxx
F.30
SP105678
HP 15s-dr0xxx
F.31
SP107533
HP 15s-dr1xxx
F.31
SP107533
HP 15s-dr2xxx
F.31
SP107533
HP 15s-du0xxx
F.31
SP107533
HP 15s-du1xxx
F.31
SP107533
HP 15s-du2xxx
F.31
SP107533
HP 15s-dy0xxx
F.31
SP107533
HP 15s-dy1xxx
F.31
SP107533
HP 15s-dy2xxx
F.31
SP107533
HP 15s-fq0xxx
F.13
SP107411
HP 15s-fq1xxx
F.13
SP107411
HP 15s-fr0xxx
F.13
SP107411
HP 15s-fr1xxx
F.13
SP107411
HP 15s-fy0xxx
F.13
SP107411
HP 15s-fy1xxx
F.13
SP107411
HP 15t-da100
F.30
SP105678
HP 15t-da200
F.30
SP105678
HP 15t-dw000
F.31
SP107533
HP 15t-dw100
F.31
SP107533
HP 15t-dw200
F.31
SP107533
HP 15t-dy000
F.13
SP107411
HP 15t-dy100
F.13
SP107411
HP ENVY 13-aq0xxx
F.13
SP107612
HP ENVY 13-aq1xxx
F.11
SP105942
HP ENVY 13-ba0xxx
F.10
SP105533
HP ENVY 13m-ba0xxx
F.10
SP105533
HP ENVY 13t-aq000
F.13
SP107612
HP ENVY 13t-aq100
F.11
SP105942
HP ENVY 13t-ba000
F.10
SP105533
HP ENVY 15-ep0xxx
F.02
sp107215
HP ENVY 15m-ep0xxx
F.02
sp107215
HP ENVY 15t-ep000
F.02
sp107215
HP ENVY 17-ce0xxx
F.10
SP106012
HP ENVY 17-ce1xxx
F.07
SP107537
HP ENVY 17-cg0xxx
F.10
SP105532
HP ENVY 17-cg0xxx
F.10
SP105532
HP ENVY 17m-ce0xxx
F.10
SP106012
HP ENVY 17m-ce1xxx
F.07
SP107537
HP ENVY 17m-cg0xxx
F.10
SP105532
HP ENVY 17m-cg0xxx
F.10
SP105532
HP ENVY 17t-ce000
F.10
SP106012
HP ENVY 17t-ce100
F.07
SP107537
HP ENVY 17t-cg000
F.10
SP105532
HP ENVY 17t-cg000
F.10
SP105532
HP ENVY x360 15-dr0xxx
F.12
SP105935
HP ENVY x360 15-dr1xxx
F.09
SP107542
HP ENVY x360 15-ed0xxx
F.11
SP105534
HP ENVY x360 15m-dr0xxx
F.12
SP105935
HP ENVY x360 15m-dr1xxx
F.09
SP107542
HP ENVY x360 15m-ed0xxx
F.11
SP105534
HP ENVY x360 15t-dr000
F.12
SP105935
HP ENVY x360 15t-dr100
F.09
SP107542
HP ENVY x360 15t-ed000
F.11
SP105534
HP OMEN 15-dh1xxx
F.12
SP106128
HP OMEN 15-ek0xxx
F.05
SP107341
HP OMEN 15t-dh100
F.12
SP106128
HP OMEN 17-cb1xxx
F.12
SP106128
HP OMEN 17t-cb100
F.12
SP106128
HP Pavilion 13-an0xxx
F.10
sp105826
HP Pavilion 13-an1xxx
F.10
sp105826
HP Pavilion 13t-an000
F.10
sp105826
HP Pavilion 13t-an100
F.10
sp105826
HP Pavilion Gaming 15-dk1xxx
F.12
SP105989
HP Pavilion Gaming 15t-dk100
F.12
SP105989
HP Pavilion Gaming 16-a0xxx
F.11
SP107430
HP Pavilion Gaming 16t-a000
F.11
SP107430
HP Pavilion Gaming 17-cd1xxx
F.12
SP105989
HP Pavilion Gaming 17t-cd100
F.12
SP105989
HP Pavilion x360 11-ap0xxx
F.06
SP105437
HP Pavilion x360 11m-ap0xxx
F.06
SP105437
HP Pavilion x360 11t-ap000
F.06
SP105437
HP Pavilion x360 14-ba2xx
F.15
SP105853
HP Pavilion x360 14-dh0xxx
F.14
SP108918
HP Pavilion x360 14-dh2xxx
F.03
SP105825
HP Pavilion x360 14-dw0xxx
F.17
SP107524
HP Pavilion x360 14m-dh0xxx
F.14
SP108918
HP Pavilion x360 14m-dw0xxx
F.17
SP107524
HP Pavilion x360 14q-dh0xxx
F.14
SP108918
HP Pavilion x360 14q-dw0xxx
F.17
SP107524
HP Pavilion x360 14t-ba200
F.15
SP105853
HP Pavilion x360 14t-dh000
F.14
SP108918
HP Pavilion x360 14t-dh200
F.03
SP105825
HP Pavilion x360 14t-dw000
F.17
SP107524
HP Pavilion x360 15-dq0xxx
F.11
SP109021
HP Pavilion x360 15-dq1xxx
F.08
SP105822
HP Pavilion x360 15t-dq000
F.11
SP109021
HP Pavilion x360 15t-dq100
F.08
SP105822
HP Spectre 13-af1xx
F.15
SP105914
HP Spectre 13t-af100
F.15
SP105914
HP Spectre x360 13-ap0xxx
F.41
sp108734
HP Spectre x360 13-aw0xxx
F.15
SP107207
HP Spectre x360 13t-ap000
F.41
SP108734
HP Spectre x360 15-df0xxx
F.42
SP108735
HP Spectre x360 15-df1xxx
F.23
SP108737
HP Spectre x360 15-eb0xxx
F.07
SP105979
HP Spectre x360 15t-df000
F.42
SP108735
HP Spectre x360 15t-df100
F.23
SP108737
HP Spectre x360 15t-eb000
F.07
SP105979

Home Desktop PCs

Product Name
Updated Version
SoftPaq #
SoftPaq Link
HP 190-0xxx (ROM Family SSID 8526)
F.21
SP104195
HP All-in-One 22-c0xxx (ROM Family SSID 8446)
F.26
SP108811
HP All-in-One 22-dd0xxx (ROM Family SSID 86EF)
F.10
SP104222
HP All-in-One 22-dd0xxx (ROM Family SSID 86F7)
F.10
SP104212
HP All-in-One 22-dd0xxx (ROM Family SSID 86F8)
F.11
SP104221
HP All-in-One 22-dd0xxx (ROM Family SSID 87A4)
F.10
SP106015
HP All-in-One 22-df0xxx (ROM Family SSID 86EF)
F.10
SP104222
HP All-in-One 22-df0xxx (ROM Family SSID 86F7)
F.10
SP104212
HP All-in-One 22-df0xxx (ROM Family SSID 86F8)
F.11
SP104221
HP All-in-One 22-df0xxx (ROM Family SSID 87A4)
F.10
SP106015
HP All-in-One 24-dd0xxx (ROM Family SSID 86EF)
F.10
SP104222
HP All-in-One 24-dd0xxx (ROM Family SSID 86F7)
F.10
SP104212
HP All-in-One 24-dd0xxx (ROM Family SSID 86F8)
F.11
SP104221
HP All-in-One 24-dd0xxx (ROM Family SSID 87A4)
F.10
SP106015
HP All-in-One 24-df0xxx (ROM Family SSID 86EF)
F.10
SP104222
HP All-in-One 24-df0xxx (ROM Family SSID 86F7)
F.10
SP104212
HP All-in-One 24-df0xxx (ROM Family SSID 86F8)
F.11
SP104221
HP All-in-One 24-df0xxx (ROM Family SSID 87A4)
F.10
SP106015
HP All-in-One 24-dp0xxx (ROM Family SSID 86F7)
F.10
SP104212
HP All-in-One 24-dp0xxx (ROM Family SSID 86F8)
F.11
SP104221
HP All-in-One 24-dp0xxx (ROM Family SSID 87A4)
F.10
SP106015
HP All-in-One 24-f0xxx (ROM Family SSID 8446)
F.26
SP108811
HP All-in-One 27-dp0xxx (ROM Family SSID 86F7)
F.10
SP104212
HP All-in-One 27-dp0xxx (ROM Family SSID 86F8)
F.11
SP104221
HP All-in-One 27-dp0xxx (ROM Family SSID 87A4)
F.10
SP106015
HP ENVY 27-b2XX (ROM Family SSID 8419)
F.75
SP106021
HP ENVY 32-a0xxx (ROM Family SSID 86C6)
F.15
SP104337
HP ENVY 32-a1xxx (ROM Family SSID 86C7)
F.10
SP105541
HP ENVY 795-0xxx (ROM Family SSID 844C)
F.42
SP106122
HP ENVY All-in-One 34-b1xx (ROM Family SSID 844E)
F.75
SP106023
HP ENVY TE01-0xxx (ROM Family SSID 8653)
F.20
SP106062
HP ENVY TE01-1xxx (ROM Family SSID 8767)
F.11
SP105981
HP M01-D0xxx (ROM Family SSID 86E9)
F.21
SP106193
HP M01-D1xxx (ROM Family SSID 8768)
F.12
SP106059
HP M01-F0xxx (ROM Family SSID 86E9)
F.21
SP106193
HP M01-F1xxx (ROM Family SSID 8768)
F.12
SP106059
HP OMEN 25L Desktop GT11-0xxx (ROM Family SSID 8703)
F.10
SP105667
HP OMEN 25L Desktop GT11-0xxx (ROM Family SSID 8704)
F.10
SP105668
HP OMEN 875-0xxx (ROM Family SSID 84FD)
F.26
SP104177
HP OMEN Obelisk V2 GT10-0xxx (ROM Family SSID 8703)
F.10
SP105667
HP OMEN Obelisk V2 GT10-0xxx (ROM Family SSID 8704)
F.10
SP105668
HP Pavilion All-in-One 24-b3XX (ROM Family SSID 8475)
F.12
SP107423
HP Pavilion All-in-One 24-k0xxx (ROM Family SSID 86ED)
F.10
SP105746
HP Pavilion All-in-One 24-qc0xxx (ROM Family SSID 86ED)
F.10
SP105746
HP Pavilion All-in-One 24-r1xx (ROM Family SSID 8448)
F.18
SP107422
HP Pavilion All-in-One 24-xa0xxx (ROM Family SSID 84EE)
F.26
SP108743
HP Pavilion All-in-One 27-d0xxx (ROM Family SSID 86ED)
F.10
SP105746
HP Pavilion All-in-One 27-qa1xx (ROM Family SSID 8448)
F.18
SP107422
HP Pavilion All-in-One 27-qc0xxx (ROM Family SSID 86ED)
F.10
SP105746
HP Pavilion All-in-One 27-r1xx (ROM Family SSID 8448)
F.18
SP107422
HP Pavilion All-in-One 27-xa0xxx (ROM Family SSID 84EE)
F.26
SP108743
HP Pavilion Desktop 590-a0xxx (ROM Family SSID 843B)
F.43
SP106172
HP Pavilion Desktop 590-p0xxx (ROM Family SSID 843B)
F.43
SP106172
HP Pavilion Desktop 595-p0xxx (ROM Family SSID 843B)
F.43
SP106172
HP Pavilion Gaming 790-0xxx (ROM Family SSID 844C)
F.42
SP106122
HP Pavilion Gaming Desktop 690-0xxx (ROM Family SSID 843B)
F.43
SP106172
HP Pavilion Gaming TG01-1xxx (ROM Family SSID 8767)
F.11
SP105981
HP Pavilion TP01-0xxx (ROM Family SSID 8653)
F.20
SP106062
HP Pavilion TP01-1xxx (ROM Family SSID 8767)
F.11
SP105981
HP Slim Desktop 290-a0xxx (ROM Family SSID 843F)
F.43
SP106187
HP Slim Desktop 290-p0xxx (ROM Family SSID 843F)
F.43
SP106187
HP Slim S01-aD0xxx (ROM Family SSID 86E9)
F.21
SP106193
HP Slim S01-aD1xxx (ROM Family SSID 8768)
F.12
SP106059
HP Slim S01-aF0xxx (ROM Family SSID 86E9)
F.21
SP106193
HP Slim S01-aF1xxx (ROM Family SSID 8768)
F.12
SP106059
HP VR backpack G2 (ROM Family SSID 8590)
F.18
SP108802
OMEN by HP 873-0xxx (ROM Family SSID 86D2)
F.09
SP105783
OMEN by HP Obelisk 875-1xxx (ROM Family SSID 8509)
F.31
SP105862
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit https://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://www.hp.com/go/alerts.
Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
PI
HP Printing and Imaging
HF
HP Hardware and Firmware
GN
HP General Software
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISION HISTORY : Version:1 - 11 February 2020 Initial release. Version: 2 – 18 March 2020 Updated Business PC and Retail Point of Sale platform lists. Version: 3 – 20 April 2020 Updated Business PC and Home PC platform lists. Version: 4 – 02 October 2020 Updated information in Resolution section, and softpaq information for Business PC (200/300 series), Thin Clients and Home PC tables.

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.