CVE-2019-16284

High

Description

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

SeverityHigh

CVSS7.2

Exploit probability—

ProductHp 260 G1 Dm Firmware

PublishedNov 5, 2019

First seenNov 5, 2019

How to fix

Update

hp 260_g1_dm_firmware2.27 or later
hp 280_pro_g1_firmware80.3 or later
hp 285_g2_firmwarea0.23 or later
hp 340_g3_firmwaref.48 or later
hp 340_g4_firmwaref.55 or later
hp 346_g3_firmwaref.48 or later
hp 346_g4_firmwaref.46 or later
hp 348_g3_firmwaref.48 or later
hp 348_g4_firmwaref.55 or later
hp elite_slice_firmware2.42 or later
hp elite_x2_1011_g1_firmware1.27 or later
hp elite_x2_1012_g1_firmware1.42 or later

Affected products

Product	Affected versions	Fixed in
hp 260_g1_dm_firmware	v < 2.27	2.27
hp 280_pro_g1_firmware	v < 80.3	80.3
hp 285_g2_firmware	v < a0.23	a0.23
hp 340_g3_firmware	v < f.48	f.48
hp 340_g4_firmware	v < f.55	f.55
hp 346_g3_firmware	v < f.48	f.48
hp 346_g4_firmware	v < f.46	f.46
hp 348_g3_firmware	v < f.48	f.48
hp 348_g4_firmware	v < f.55	f.55
hp elite_slice_firmware	v < 2.42	2.42
hp elite_x2_1011_g1_firmware	v < 1.27	1.27
hp elite_x2_1012_g1_firmware	v < 1.42	1.42
hp elitebook_1030_g1_firmware	v < 1.42	1.42
hp elitebook_1040_g2_firmware	v < 1.17	1.17
hp elitebook_720_g1__firmware	v < 1.48	1.48
hp elitebook_720_g2_firmware	v < 1.29	1.29
hp elitebook_740_g1_firmware	v < 1.48	1.48
hp elitebook_740_g2_firmware	v < 1.29	1.29
hp elitebook_750_g1_firmware	v < 1.48	1.48
hp elitebook_750_g2_firmware	v < 1.29	1.29
hp elitebook_820_g1_firmware	v < 1.48	1.48
hp elitebook_820_g2_firmware	v < 1.29	1.29
hp elitebook_820_g3_firmware	v < 1.42	1.42
hp elitebook_828_g3_firmware	v < 1.42	1.42
hp elitebook_840_g1_firmware	v < 1.48	1.48
hp elitebook_840_g2_firmware	v < 1.29	1.29
hp elitebook_840_g3_firmware	v < 1.42	1.42
hp elitebook_848_g3_firmware	v < 1.42	1.42
hp elitebook_850_g1_firmware	v < 1.48	1.48
hp elitebook_850_g2_firmware	v < 1.29	1.29
hp elitebook_850_g3_firmware	v < 1.42	1.42
hp elitebook_folio_1020_g1_firmware	v < 1.24	1.24
hp elitebook_folio_1040_g1_firmware	v < 1.44	1.44
hp elitebook_folio_1040_g3_firmware	v < 1.42	1.42
hp elitebook_folio_9480m_firmware	v < 1.49	1.49
hp elitebook_folio_g1_firmware	v < 1.42	1.42
hp elitebook_revolve_810_g2_firmware	v < 1.45	1.45
hp elitebook_revolve_810_g3_firmware	v < 1.2	1.2
hp elitedesk_800_g2_dm_firmware	v < 2.42	2.42
hp elitedesk_800_g2_sff_firmware	v < 2.42	2.42
hp elitedesk_800_g2_twr_firmware	v < 2.42	2.42
hp eliteone_800_g2_aio_firmware	v < 2.42	2.42
hp elitepad_1000_g2_firmware	v < 1.48	1.48
hp mp9_g2_retail_system_firmware	v < 2.42	2.42
hp pro_tablet_10_ee_g1_firmware	v < 1.31	1.31
hp pro_tablet_608_g1_firmware	v < 1.21	1.21
hp pro_tablet_610_g1_firmware	v < f.16	f.16
hp pro_x2_612_g1_firmware	v < 1.48	1.48
hp probook_11_g1_firmware	v < 1.17	1.17
hp probook_11_g2_firmware	v < 1.42	1.42
hp probook_430_g1_firmware	v < 1.49	1.49
hp probook_430_g2_firmware	v < 1.52	1.52
hp probook_430_g3_firmware	v < 1.42	1.42
hp probook_440_g1_firmware	v < 1.49	1.49
hp probook_440_g2_firmware	v < 1.52	1.52
hp probook_440_g3_firmware	v < 1.42	1.42
hp probook_450_g1_firmware	v < 1.49	1.49
hp probook_450_g2_firmware	v < 1.52	1.52
hp probook_450_g3_firmware	v < 1.42	1.42
hp probook_470_g1_firmware	v < 1.49	1.49
hp probook_470_g2_firmware	v < 1.52	1.52
hp probook_470_g3_firmware	v < 1.42	1.42
hp probook_640_g1_firmware	v < 1.49	1.49
hp probook_640_g2_firmware	v < 1.42	1.42
hp probook_650_g1_firmware	v < 1.49	1.49
hp probook_650_g2_firmware	v < 1.42	1.42
hp probook_x360_11_g1_firmware	v < 1.3	1.3
hp prodesk_400_g1_dm_firmware	v < 2.27	2.27
hp prodesk_400_g2_dm_firmware	v < 2.42	2.42
hp prodesk_400_g2.5_sff_firmware	v < 2.26	2.26
hp prodesk_400_g3_sff_firmware	v < 2.42	2.42
hp prodesk_405_g2_mt_firmware	v < 2.29	2.29
hp prodesk_485_g2_mt_firmware	v < 2.29	2.29
hp prodesk_480_g3_sff_firmware	v < 2.42	2.42
hp prodesk_490_g2_mt_firmware	v < 2.31	2.31
hp prodesk_490_g3_sff_firmware	v < 2.42	2.42
hp prodesk_498_g2_mt_firmware	v < 2.31	2.31
hp prodesk_498_g3_sff_firmware	v < 2.42	2.42
hp prodesk_600_g2_dm_firmware	v < 2.42	2.42
hp prodesk_600_g2_sff_firmware	v < 2.42	2.42
hp proone_400_g2_aio_firmware	v < 2.42	2.42
hp proone_600_g2_aio_firmware	v < 2.42	2.42
hp rp2_retail_system_firmware	v < 2.21	2.21
hp rp9_g1_retail_system_9015_firmware	v < 2.42	2.42
hp rp9_g1_retail_system_9018_firmware	v < 2.42	2.42
hp zbook_14_g2_firmware	v < 1.29	1.29
hp zbook_14_firmware	v < 1.48	1.48
hp zbook_15_g2_firmware	v < 1.25	1.25
hp zbook_15_g3_firmware	v < 1.42	1.42
hp zbook_15_firmware	v < 1.46	1.46
hp zbook_15u_g2_firmware	v < 1.29	1.29
hp zbook_15u_g3_firmware	v < 1.42	1.42
hp zbook_17_g2_firmware	v < 1.25	1.25
hp zbook_17_g3_firmware	v < 1.42	1.42
hp zbook_17_firmware	v < 1.46	1.46
hp zbook_studio_g3_firmware	v < 1.42	1.42
hp z1_g3_firmware	v < 1.26	1.26
hp z2_mini_g3_firmware	v < 1.77	1.77
hp z238_microtower_firmware	v < 1.77	1.77
hp z240_sff_firmware	v < 1.77	1.77
hp z240_tower_firmware	v < 1.77	1.77
hp sprout_pro_firmware	v < a0.14	a0.14

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

ProductVersion

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.