solution Contentsolution Content

HP January 2023 BIOS refresh(for 2016 desktops PCs)

Learn about the BIOS enhancements on the HP 2016 desktops PCs.

Description

HP is enhancing the BIOS on the following HP 2016 desktops PCs.

Products affected

HP Elite Slice Desktop PC

HP EliteOne 1000 G1 All-in-One PC

HP EliteOne 800 G3 All-in-One PC

HP EliteDesk 800/880 G3 TWR/ 800 G3 SFF PC

HP EliteDesk 800 G3 Desktop Mini PC

HP ProOne 600 G3 All-in-One PC

HP ProDesk 600/680 G3 MT PC

HP ProDesk 600 G3 SFF PC

HP ProDesk 600 G3 Desktop Mini PC

HP Engage One All-in-One System, Models 141, 143, 145

HP RP9 G1 Retail System Model 9115 & 9118

HP EliteDesk 705 G3 MT/SFF PC

HP EliteDesk 705 G3 Desktop Mini PC

HP ProDesk 400/480 G4 MT PC

HP ProDesk 400 G4 MT PC

HP ProDesk 400 G4 SFF PC

HP ProDesk 400 G3 Desktop Mini PC

HP ProOne 400 G3 All-in-One PC

Geographies affected

Worldwide

Effective date

14-Feb-2023

Document Information

Current document version

1.0

Date

29-Mar-2023

Details of change

Effective February 14, 2023, HP is enhancing the BIOS on the HP 2016 desktops PCs.

The new software and BIOS updates are available for download from the HP Software and Driver Downloads page after the effective date.

HP Elite Slice System Bios has the following enhancements added::

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP EliteOne 1000 G1 All-in-One System BIOS has the following enhancements added::

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP EliteDesk 800/880 G3 TWR/ 800 G3 SFF System BIOS has the following enhancements added::

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP EliteOne 800 G3 All-in-One System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP EliteDesk 800 G3 Desktop Mini System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 600/680 G3 MT System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 600 G3 SFF System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProOne 600 G3 All-in-One System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 600 G3 Desktop Mini System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539,

HP Engage One All-in-One System, Models 141, 143, 145 System BIOS has the following enhancements added:

  • Add UEFI PXE boot support for HP Universal USB-C Multiport Hub.

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Fixes an issue where the user is unable to enter F10 BIOS menu via keyboard or unable to boot to USB storage if plug specific USB Cash Drawer.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP RP9 G1 Retail System Model 9115 & 9118 System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP EliteDesk 705 G3 MT/SFF System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP EliteDesk 705 G3 Desktop Mini System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 400/480 G4 MT System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 400 G4 MT System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 400 G4 SFF System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 400 G4 MT System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProDesk 400 G3 Desktop Mini System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

HP ProOne 400 G3 All-in-One System BIOS has the following enhancements added:

  • Fixes issue where BIOS Administrator password/Power on password can be accepted when the password length is less than Password Minimum Length.

  • Enhancement to address security vulnerabilities CVE-2022-27541.

  • Enhancement to address security vulnerabilities CVE-2022-33894.

  • Enhancement to address security vulnerabilities CVE-2022-43777.

  • Enhancement to address security vulnerabilities CVE-2022-27539.

Component version

HP Elite Slice System BIOS (P25) [02.60]

HP EliteOne 1000 G1 All-in-One System BIOS (P10) [02.45]

HP EliteDesk 800/880 G3 TWR/ 800 G3 SFF System BIOS (P01) [02.45]

HP EliteOne 800 G3 All-in-One System BIOS (P11) [02.45]

HP EliteDesk 800 G3 Desktop Mini System BIOS (P21) [02.45]

HP ProDesk 600/680 G3 MT System BIOS (P02) [02.45]

HP ProDesk 600 G3 SFF System BIOS (P07) [02.45]

HP ProOne 600 G3 All-in-One System BIOS (P12) [02.45]

HP ProDesk 600 G3 Desktop Mini System BIOS (P22) [02.45]

HP Engage One All-in-One System BIOS (P30) [02.45]

HP RP9 G1 Retail System Model 9115 & 9118 System BIOS (P35) [02.60]

HP EliteDesk 705 G3 MT/SFF System BIOS (P06, P09) [02.42]

HP EliteDesk 705 G3 Desktop Mini System BIOS (P26) [02.42]

HP ProDesk 400/480 G4 MT System BIOS (P03) [02.45]

HP ProDesk 400 G4 MT System BIOS (P05) [02.45]

HP ProDesk 400 G4 SFF System BIOS (P08) [02.45]

HP ProDesk 400 G3 Desktop Mini System BIOS (P23) [02.45]

HP ProOne 400 G3 All-in-One System BIOS (P13) [02.45]

Support URL

http://www.hp.com/go/bizsupport

Reason for change

Regular quarterly release.

Date of change

14-02-2023

Revision history

This document has been revised according to the information below.

List of versions

Version

Description

Date

1

Initial Release

29-Mar-2023

© Copyright 2023 HP Development Company, L.P.

HP Inc. (HP) shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP nor its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. "HP Inc.," "HP" and the names of HP products referenced herein are trademarks of HP Inc. or its affiliates in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.