CVE-2021-3808

High

Description

Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.

SeverityHigh
CVSS7.8
Exploit probability—
ProductHp Elite Dragonfly Firmware
PublishedFeb 1, 2023
First seenFeb 1, 2023

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
hp elite_dragonfly_firmware01.12.00—
hp elite_x2_1012_g2_firmware1.41—
hp elite_x2_1013_g3_firmware01.19.00—
hp elite_x2_g4_firmware01.12.00—
hp elitebook_1040_g4_firmware1.41—
hp elitebook_1050_g1_firmware01.19.00—
hp elitebook_725_g4_firmware1.4—
hp elitebook_735_g5_firmware01.20.00—
hp elitebook_735_g6_firmware01.19.00—
hp elitebook_745_g4_firmware1.4—
hp elitebook_745_g5_firmware01.20.00—
hp elitebook_745_g6_firmware01.19.00—
hp elitebook_755_g4_firmware1.4—
hp elitebook_755_g5_firmware01.20.00—
hp elitebook_820_g4_firmware1.41—
hp elitebook_828_g4_firmware1.41—
hp elitebook_830_g5_firmware01.19.00—
hp elitebook_830_g6_firmware01.12.00—
hp elitebook_836_g5_firmware01.19.00—
hp elitebook_836_g6_firmware01.12.00—
hp elitebook_840_g4_firmware1.41—
hp elitebook_840_g5_firmware01.19.00—
hp elitebook_840_g6_firmware01.12.00—
hp elitebook_840r_g4_firmware01.19.00—
hp elitebook_846_g5_firmware01.19.00—
hp elitebook_848_g4_firmware1.41—
hp elitebook_850_g4_firmware1.41—
hp elitebook_850_g5_firmware01.19.00—
hp elitebook_850_g6_firmware01.12.00—
hp elitebook_x360_1020_g2_firmware1.41—
hp elitebook_x360_1030_g2_firmware1.41—
hp elitebook_x360_1030_g3_firmware01.19.00—
hp elitebook_x360_1030_g4_firmware01.12.00—
hp elitebook_x360_1040_g5_firmware01.19.00—
hp elitebook_x360_1040_g6_firmware01.12.00—
hp elitebook_x360_830_g5_firmware01.19.00—
hp elitebook_x360_830_g6_firmware01.12.00—
hp pro_x2_612_g2_firmware1.41—
hp probook_11_ee_g2_firmware1.55—
hp probook_430_g4_firmware1.41—
hp probook_430_g5_firmware01.20.00—
hp probook_430_g6_firmware01.19.00—
hp probook_440_g4_firmware1.41—
hp probook_440_g5_firmware01.20.00—
hp probook_440_g6_firmware01.19.00—
hp probook_445_g6_firmware01.19.00—
hp probook_445r_g6_firmware01.19.00—
hp probook_450_g4_firmware1.41—
hp probook_450_g5_firmware01.20.00—
hp probook_450_g6_firmware01.19.00—
hp probook_455_g4_firmware1.4—
hp probook_455_g5_firmware01.20.00—
hp probook_455_g6_firmware01.19.00—
hp probook_455r_g6_firmware01.19.00—
hp probook_470_g4_firmware1.41—
hp probook_470_g5_firmware01.20.00—
hp probook_640_g3_firmware1.41—
hp probook_640_g4_firmware01.20.00—
hp probook_640_g5_firmware01.12.00—
hp probook_645_g3_firmware1.4—
hp probook_645_g4_firmware01.20.00—
hp probook_650_g3_firmware1.41—
hp probook_650_g4_firmware01.20.00—
hp probook_650_g5_firmware01.12.00—
hp probook_655_g3_firmware1.4—
hp probook_x360_11_g2_ee_firmware1.43—
hp probook_x360_11_g3_ee_firmware01.17.00—
hp probook_x360_11_g4_ee_firmware01.13.00—
hp probook_x360_440_g1_firmware01.19.00—
hp zbook_14u_g4_firmware1.41—
hp zbook_14u_g5_firmware01.19.00—
hp zbook_14u_g6_firmware01.12.00—
hp zbook_15_g4_firmware1.41—
hp zbook_15_g5_firmware01.19.00—
hp zbook_15_g6_firmware01.12.00—
hp zbook_15u_g4_firmware1.41—
hp zbook_15u_g5_firmware01.19.00—
hp zbook_15u_g6_firmware01.12.00—
hp zbook_17_g4_firmware1.41—
hp zbook_17_g5_firmware01.19.00—
hp zbook_17_g6_firmware01.12.00—
hp zbook_studio_g4_firmware1.41—
hp zbook_studio_g5_firmware01.19.00—
hp zbook_studio_x360_g5_firmware01.19.00—
hp zbook_x2_g4_firmware1.41—
hp zhan_66_pro_13_g2_firmware01.19.00—
hp zhan_66_pro_14_g2_firmware01.19.00—
hp zhan_66_pro_15_g2_firmware01.19.00—
hp zhan_66_pro_g1_firmware01.20.00—
hp zhan_x_13_g2_firmware01.12.00—
hp hp_z1_all-in-one_g3_firmware1.31—
hp hp_z1_entry_tower_g5_firmware02.11.00—
hp hp_z2_mini_g3_firmware1.83—
hp hp_z2_mini_g4_firmware01.08.01—
hp hp_z2_mini_g5_firmware01.04.02—
hp hp_z2_small_form_factor_g4_firmware01.08.01—
hp hp_z2_small_form_factor_g5_firmware01.04.02—
hp hp_z2_tower_g4_firmware01.08.01—
hp hp_z2_tower_g5_firmware01.04.02—
hp hp_z238_microtower_firmware1.83—
hp hp_z240_small_form_factor_firmware1.83—
hp hp_z240_tower_firmware1.83—
hp hp_mt21_mobile_thin_client_firmware01.21.01—
hp hp_mt31_mobile_thin_client_firmware01.21.01—
hp hp_mt44_mobile_thin_client_firmware01.21.01—
hp hp_mt45_mobile_thin_client_firmware01.21.01—
hp elite_slice_firmware2.55—
hp elite_slice_g2_firmware2.55—
hp elitedesk_705_g3_desktop_mini_pc_firmware2.38—
hp elitedesk_705_g3_microtower_pc_firmware2.38—
hp elitedesk_705_g3_small_form_factor_pc_firmware2.38—
hp elitedesk_705_g4_desktop_mini_pc_firmware02.17.00—
hp elitedesk_705_g4_microtower_pc_firmware02.17.00—
hp elitedesk_705_g4_small_form_factor_pc_firmware02.12.00—
hp elitedesk_705_g4_workstation_firmware02.17.00—
hp elitedesk_705_g5_desktop_mini_pc_firmware02.11.00—
hp elitedesk_705_g5_small_form_factor_pc_firmware02.11.00—
hp elitedesk_800_35w_g3_desktop_mini_pc_firmware2.4—
hp elitedesk_800_35w_g4_desktop_mini_pc_firmware02.18.00—
hp elitedesk_800_65w_g3_desktop_mini_pc_firmware2.4—
hp elitedesk_800_65w_g4_desktop_mini_pc_firmware02.18.00—
hp elitedesk_800_95w_g4_desktop_mini_pc_firmware02.18.00—
hp elitedesk_800_g3_small_form_factor_pc_firmware2.4—
hp elitedesk_800_g3_tower_pc_firmware2.4—
hp elitedesk_800_g4_small_form_factor_pc_firmware02.17.00—
hp elitedesk_800_g4_tower_pc_firmware02.17.00—
hp elitedesk_800_g4_workstation_firmware02.17.00—
hp elitedesk_800_g5_desktop_mini_pc_firmware02.11.00—
hp elitedesk_800_g5_small_form_factor_pc_firmware02.11.00—
hp elitedesk_800_g5_tower_pc_firmware02.11.00—
hp elitedesk_880_g3_tower_pc_firmware2.4—
hp elitedesk_880_g4_tower_pc_firmware02.17.00—
hp elitedesk_880_g5_tower_pc_firmware02.11.00—
hp eliteone_1000_g1_23.8-in_all-in-one_business_pc_firmware2.4—
hp eliteone_1000_g2_23.8-in_all-in-one_business_pc_firmware02.18.00—
hp eliteone_800_g3_23.8_non-touch_all-in-one_business_pc_firmware2.4—
hp eliteone_800_g4_23.8-in_all-in-one_business_pc_firmware02.18.00—
hp eliteone_800_g5_23.8-in_all-in-one_firmware2.11.01—
hp prodesk_400_g3_desktop_mini_pc_firmware2.4—
hp prodesk_400_g4_desktop_mini_pc_firmware02.18.00—
hp prodesk_400_g4_microtower_pc_firmware2.4—
hp prodesk_400_g4_small_form_factor_pc_firmware2.4—
hp prodesk_400_g5_desktop_mini_pc_firmware02.11.00—
hp prodesk_400_g5_microtower_pc_firmware02.17.00—
hp prodesk_400_g5_small_form_factor_pc_firmware2.17—
hp prodesk_400_g6_microtower_pc_firmware02.11.00—
hp prodesk_400_g6_small_form_factor_pc_firmware02.11.00—
hp prodesk_405_g4_desktop_mini_pc_firmware02.17.00—
hp prodesk_405_g4_small_form_factor_pc_firmware02.12.00—
hp prodesk_480_g4_microtower_pc_firmware2.4—
hp prodesk_480_g5_microtower_pc_firmware02.17.00—
hp prodesk_480_g6_microtower_pc_firmware02.11.00—
hp prodesk_600_g3_desktop_mini_pc_firmware2.4—
hp prodesk_600_g3_microtower_pc_firmware2.4—
hp prodesk_600_g3_small_form_factor_pc_firmware2.4—
hp prodesk_600_g4_desktop_mini_pc_firmware02.18.00—
hp prodesk_600_g4_microtower_pc_firmware02.17.00—
hp prodesk_600_g4_small_form_factor_pc_firmware02.18.00—
hp prodesk_600_g5_desktop_mini_pc_firmware02.11.00—
hp prodesk_600_g5_microtower_pc_firmware02.11.00—
hp prodesk_600_g5_small_form_factor_pc_firmware02.11.00—
hp prodesk_680_g3_microtower_pc_firmware2.4—
hp prodesk_680_g4_microtower_pc_firmware02.17.00—
hp proone_400_g3_20-inch_non-touch_all-in-one_pc_firmware2.4—
hp proone_400_g3_20-inch_touch_all-in-one_pc_firmware2.4—
hp proone_400_g4_20-inch_non-touch_all-in-one_business_pc_firmware02.17.00—
hp proone_400_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware02.17.00—
hp proone_400_g5_20-inch_all-in-one_business_pc_firmware02.11.01—
hp proone_400_g5_23.8-inch_all-in-one_business_pc_firmware02.11.01—
hp proone_440_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware02.17.00—
hp proone_440_g5_23.8-in_all-in-one_business_pc_firmware02.11.01—
hp proone_480_g3_20-inch_non-touch_all-in_one_pc_firmware2.4—
hp proone_600_g3_21.5-inch_non-touch_all-in-one_pc_firmware2.4—
hp proone_600_g4_21.5-inch_touch_all-in-one_business_pc_firmware02.17.00—
hp proone_600_g5_21.5-in_all-in-one_business_pc_firmware02.11.01—
hp engage_flex_pro_retail_system_firmware02.17.00—
hp engage_flex_pro-c_retail_system_firmware02.17.00—
hp engage_go_10_mobile_system_firmware01.08.00—
hp engage_go_mobile_system_firmware01.19.00—
hp engage_one_aio_system_firmware02.40.00—
hp mp9_g4_retail_system_firmware02.17.00—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-3808 · Hp Elite Dragonfly Firmware · Dark Radar