Lucene search
HP Product Security Response TeamHPSBHF03846HistoryMay 09, 2023 - 12:00 a.m.
AMD Client UEFI Firmware May 2023 Security Update
2023-05-0900:00:00
HP Product Security Response Team
support.hp.com
25
amd
uefi
firmware
update
potential vulnerabilities
athlon processors
ryzen processors
arbitrary code execution
denial of service
information disclosure
hp
affected platforms
softpaqs
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0.002
Percentile
52.7%
AMD has informed HP of potential vulnerabilities identified in client platform components for some AMD Athlon™ Processors and Ryzen™ Processors, which might allow arbitrary code execution, denial of service, and/or information disclosure. AMD is releasing firmware updates to mitigate these vulnerabilities.
AMD has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.
Affected configurations
Node
hpelitebook_645_14_inch_g9_notebook_pc_firmwareRange<01.11.00
ORhpelitebook_655_15.6_inch_g9_notebook_pc_firmwareRange<01.11.00
ORhpelitebook_735_g5_firmwareRange<01.24.00
ORhpelitebook_735_g6_firmwareRange<01.24.00
ORhpelitebook_745_g5_firmwareRange<01.24.00
ORhpelitebook_745_g6_firmwareRange<01.24.00
ORhpelitebook_755_g5_firmwareRange<01.24.00
ORhpelitebook_835_13_inch_g9_notebook_pc_firmwareRange<01.05.01
ORhpelitebook_835_g7_firmwareRange<01.13.00
ORhpelitebook_835_g8_firmwareRange<01.13.01
ORhpelitebook_845_14_inch_g9_notebook_pc_firmwareRange<01.05.01
ORhpelitebook_845_g7_firmwareRange<01.13.00
ORhpelitebook_845_g8_firmwareRange<01.13.01
ORhpelitebook_855_g7_firmwareRange<01.13.00
ORhpelitebook_855_g8_firmwareRange<01.13.01
ORhpelitebook_865_16_inch_g9_notebook_pc_firmwareRange<01.05.01
ORhpelitebook_830_13.3_inch_g9_notebook_pc_firmwareRange<01.11.01
ORhpprobook_445_14_inch_g9_notebook_pc_firmwareRange<01.11.00
ORhpprobook_445_g6_firmwareRange<01.24.00
ORhpprobook_445_g7_firmwareRange<01.13.00
ORhpprobook_445_g8_firmwareRange<01.13.01
ORhpprobook_445r_g6_firmwareRange<01.24.00
ORhpprobook_455_15.6_inch_g9_notebook_pc_firmwareRange<01.11.00
ORhpprobook_455_g6_firmwareRange<01.24.00
ORhpprobook_455_g7_firmwareRange<01.13.00
ORhpprobook_455_g8_firmwareRange<01.13.01
ORhpprobook_455r_g6_firmwareRange<01.24.00
ORhpprobook_635_aero_g7_firmwareRange<01.13.00
ORhpprobook_635_aero_g8_firmwareRange<01.13.01
ORhpprobook_645_g4_firmwareRange<01.24.00
ORhpprobook_x360_435_g7_firmwareRange<01.13.00
ORhpprobook_x360_435_g8_notebook_pc_firmwareRange<01.13.01
ORhpzhan_66_pro_a_14_g3_firmwareRange<01.13.00
ORhpzhan_66_pro_a_14_g4_notebook_pc_firmwareRange<01.13.01
ORhpzhan_66_pro_a_14_g5_notebook_pc_firmwareRange<01.11.00
ORhpdesktop_pro_a_300_g3_firmwareRange<F.12
ORhpdesktop_pro_a_g2_firmwareRange<F.11
ORhpdesktop_pro_a_g2_microtower_firmwareRange<F.11
ORhpdesktop_pro_a_g3_firmwareRange<F.12
ORhpdesktop_pro_a_g3_microtower_firmwareRange<F.12
ORhpelitedesk_705_g3_microtower_pc_firmwareRange<02.43
ORhpelitedesk_705_g3_small_form_factor_pc_firmwareRange<02.43
ORhpelitedesk_705_g4_desktop_mini_pc_firmwareRange<02.22.00
ORhpelitedesk_705_g4_microtower_pc_firmwareRange<02.22.00
ORhpelitedesk_705_g4_small_form_factor_pc_firmwareRange<02.22.00
ORhpelitedesk_705_g4_workstation_edition_firmwareRange<02.22.00
ORhpelitedesk_705_g5_desktop_mini_pc_firmwareRange<02.17.00
ORhpelitedesk_705_g5_small_form_factor_pc_firmwareRange<02.17.00
ORhpelitedesk_805_g6_desktop_mini_pc_firmwareRange<02.12.00
ORhpelitedesk_805_g6_small_form_factor_pc_firmwareRange<02.12.01
ORhpelitedesk_805_g8_desktop_mini_pc_firmwareRange<02.08.00
ORhpelitedesk_805_g8_small_form_factor_pc_firmwareRange<02.08.00
ORhpprodesk_405_g4_desktop_mini_pc_firmwareRange<02.22.0
ORhpprodesk_405_g6_desktop_mini_pc_firmwareRange<02.12.00
ORhpprodesk_405_g6_small_form_factor_pc_firmwareRange<02.12.00
ORhpprodesk_405_g8_desktop_mini_pc_firmwareRange<02.08.00
ORhpprodesk_405_g8_small_form_factor_pc_firmwareRange<02.08.00
ORhpzhan_66_pro_a_g1_microtower_firmwareRange<F.11
ORhpzhan_66_pro_a_g1_r_microtower_firmwareRange<F.12
ORhpelite_mt645_g7_firmwareRange<01.10.01
ORhpmt32_mobile_thin_client_firmwareRange<01.11.00
ORhpmt44_mobile_thin_client_firmwareRange<01.22.00
ORhpmt45_mobile_thin_client_firmwareRange<01.22.00
ORhpmt46_mobile_thin_client_firmwareRange<01.11.00
ORhphp_14-cg0xxx_firmwareRange<F.68
ORhphp_14-cm1xxx_firmwareRange<F.68
ORhp14z-cm100_firmwareRange<F.68
ORhphp_14-dk000_firmwareRange<F.68
ORhphp_14-dk0xxx_firmwareRange<F.68
ORhphp_14-dk1xxx_firmwareRange<F.68
ORhp14z-dk100_firmwareRange<F.68
ORhphp_14-fq0xxx_firmwareRange<F.67
ORhphp_14-fq1xxx_firmwareRange<F.27
ORhp14z-fq100_firmwareRange<F.27
ORhphp_14g-cg0xxx_firmwareRange<F.68
ORhphp_14g-cx1xxx_firmwareRange<F.68
ORhphp_14q-cg0xxx_firmwareRange<F.68
ORhphp_14q-cy1xxx_firmwareRange<F.68
ORhphp_14s-dk0xxx_firmwareRange<F.68
ORhphp_14s-dk1xxx_firmwareRange<F.68
ORhphp_14s-dm0xxx_firmwareRange<F.68
ORhphp_14s-dm1xxx_firmwareRange<F.68
ORhphp_14s-dp0xxx_firmwareRange<F.68
ORhphp_14s-dp1xxx_firmwareRange<F.68
ORhphp_14s-fq0xxx_firmwareRange<F.67
ORhphp_14s-fq1xxx_firmwareRange<F.27
ORhphp_14s-fr0xxx_firmwareRange<F.67
ORhphp_14s-fr1xxx_firmwareRange<F.27
ORhphp_14s-fy0xxx_firmwareRange<F.67
ORhphp_14s-fy1xxx_firmwareRange<F.27
ORhphp_15-da00xx_firmwareRange<F.40
ORhphp_15-db1xxx_firmwareRange<F.40
ORhp15z-db100_firmwareRange<F.40
ORhphp_15-ef0xxx_firmwareRange<F.67
ORhp15z-ef000_firmwareRange<F.67
ORhphp_15-ef1xxx_firmwareRange<F.67
ORhp15z-ef100_firmwareRange<F.67
ORhphp_15-ef2xxx_firmwareRange<F.27
ORhp15z-ef200_firmwareRange<F.27
ORhphp_15g-da00xx_firmwareRange<F.40
ORhphp_15g-dx1xxx_firmwareRange<F.40
ORhphp_15-gw0xxx_firmwareRange<F.33
ORhphp_15q-da00xx_firmwareRange<F.40
ORhphp_15q-dy1xxx_firmwareRange<F.40
ORhphp_15s-eq0xxx_firmwareRange<F.67
ORhphp_15s-eq1xxx_firmwareRange<F.67
ORhphp_15s-eq2xxx_firmwareRange<F.27
ORhphp_15s-er0xxx_firmwareRange<F.67
ORhphp_15s-er1xxx_firmwareRange<F.67
ORhphp_15s-er2xxx_firmwareRange<F.27
ORhphp_15s-ey0xxx_firmwareRange<F.67
ORhphp_15s-ey1xxx_firmwareRange<F.67
ORhphp_15s-ey2xxx_firmwareRange<F.27
ORhphp_15s-gr0xxx_firmwareRange<F.33
ORhphp_15s-gu0xxx_firmwareRange<F.33
ORhphp_15s-gy0xxx_firmwareRange<F.33
ORhphp_17-ca0xxx_firmwareRange<F.63
ORhphp_17-ca1xxx_firmwareRange<F.63
ORhp17z-ca100_firmwareRange<F.63
ORhphp_17-ca2xxx_firmwareRange<F.63
ORhp17z-ca200_firmwareRange<F.63
ORhphp_17-ca3xxx_firmwareRange<F.63
ORhp17z-ca300_firmwareRange<F.63
ORhp245_g7_firmwareRange<F.68
ORhp245_g8_firmwareRange<F.23
ORhp247_g8_firmwareRange<F.68
ORhp255_g7_firmwareRange<F.40
ORhphp_255_g1_notebook_pc_firmwareRange<F.33
ORhphp_255_g1_notebook_pc_firmwareRange<F.33
ORhpenvy_x360_firmwareRange<F.27
ORhp13z-ar000_firmwareRange<F.27
ORhpenvy_x360_firmwareRange<F.22
ORhp13z-ay000_firmwareRange<F.22
ORhpenvy_x360_firmwareRange<F.06
ORhp13z-ay100_firmwareRange<F.06
ORhpenvy_x360_firmwareRange<F.27
ORhpenvy_x360_firmwareRange<F.22
ORhpenvy_15-dr0xxx_x360_firmwareRange<F.26
ORhp15z-ds000_firmwareRange<F.26
ORhpenvy_15-dr0xxx_x360_firmwareRange<F.11
ORhp15z-ds100_firmwareRange<F.11
ORhpenvy_15-dr0xxx_x360_firmwareRange<F.22
ORhp15z-ee000_firmwareRange<F.22
ORhpenvy_15-dr0xxx_x360_firmwareRange<F.09
ORhp15z-ee100_firmwareRange<F.09
ORhpenvy_15-dr0xxx_x360_firmwareRange<F.11
ORhp15z-eu000_firmwareRange<F.11
ORhpenvy_15m-dr0xxx_x360_firmwareRange<F.26
ORhpenvy_15m-dr0xxx_x360_firmwareRange<F.22
ORhpenvy_15m-dr0xxx_x360_firmwareRange<F.11
ORhphp_pavilion_14-n000_firmwareRange<F.12
ORhp14z-ec000_firmwareRange<F.12
ORhppavilion_15_firmwareRange<F.50
ORhp15z-cw100_firmwareRange<F.50
ORhppavilion_15_firmwareRange<F.50
ORhppavilion_15_firmwareRange<F.24
ORhp15z-eh000_firmwareRange<F.24
ORhppavilion_15_firmwareRange<F.23
ORhppavilion_15_firmwareRange<F.16
ORhppavilion_15_firmwareRange<F.29
ORhp15z-ec100_firmwareRange<F.29
ORhppavilion_15_firmwareRange<F.23
ORhp15z-ec200_firmwareRange<F.23
ORhpzhan_99_g4_mobile_workstation_firmwareRange<F.23
ORhpomen_gaming_hubRange<F.21
ORhpomen_gaming_hubRange<F.19
ORhpomen_gaming_hubRange<F.16
ORhp15z-fb000_firmwareRange<F.16
ORhpengage_one_all-in-one_system_firmwareRange<F.31
ORhp205_g4_22_all-in-one_firmwareRange<F.32
ORhp205_g4_22_all-in-one_firmwareRange<F.42
ORhp205_g4_22_all-in-one_firmwareRange<F.42
ORhp205_g4_22_all-in-one_firmwareRange<F.42
ORhp205_g4_22_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.11
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.12
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.32
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.11
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.12
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.42
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.42
ORhpdesktop_pro_microtower_pc_firmwareRange<F.11
ORhpdesktop_pro_microtower_pc_firmwareRange<F.11
ORhphp_envy_te01-0xxx_firmwareRange<F.44
ORhphp_envy_te01-1xxx_firmwareRange<F.33
ORhphp_m01-d0xxx_firmwareRange<F.44
ORhphp_m01-d1xxx_firmwareRange<F.33
ORhphp_m01-f0xxx_firmwareRange<F.44
ORhphp_m01-f1xxx_firmwareRange<F.33
ORhpomen_gaming_hubRange<F.25
ORhpomen_gaming_hubRange<F.25
ORhpomen_gaming_hubRange<F.25
ORhphp_pavilion_24-ca0xxx_firmwareRange<F.12
ORhphp_pavilion_24-k0xxx_firmwareRange<F.13
ORhphp_pavilion_24-qb0xxx_firmwareRange<F.37
ORhphp_pavilion_24-qb1xxx_firmwareRange<F.32
ORhphp_pavilion_24-qc0xxx_firmwareRange<F.13
ORhphp_pavilion_24-xa0xxx_firmwareRange<F.37
ORhphp_pavilion_24-xa1xxx_firmwareRange<F.32
ORhphp_pavilion_27-ca0xxx_firmwareRange<F.12
ORhphp_pavilion_27-d0xxx_firmwareRange<F.13
ORhphp_pavilion_27-qb0xxx_firmwareRange<F.37
ORhphp_pavilion_27-qb1xxx_firmwareRange<F.32
ORhphp_pavilion_27-qc0xxx_firmwareRange<F.13
ORhphp_pavilion_27-xa0xxx_firmwareRange<F.37
ORhphp_pavilion_27-xa1xxx_firmwareRange<F.32
ORhpproone_400_g6_24_all-in-one_firmwareRange<F.12
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.37
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.32
ORhpproone_400_g6_24_all-in-one_firmwareRange<F.37
ORhpeliteone_800_g6_24_all-in-one_firmwareRange<F.32
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.12
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.37
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.32
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.37
ORhpeliteone_800_g6_27_all-in-one_firmwareRange<F.32
ORhphp_pavilion_gaming_tg01-0xxx_firmwareRange<F.44
ORhphp_pavilion_gaming_tg01-1xxx_firmwareRange<F.33
ORhphp_pavilion_gaming_tg01-2xxx_firmwareRange<F.21
ORhphp_pavilion_tp01-0xxx_firmwareRange<F.44
ORhphp_pavilion_tp01-1xxx_firmwareRange<F.33
ORhphp_pavilion_tp01-2xxx_firmwareRange<F.21
ORhphp_slim_s01-af0xxx_firmwareRange<F.36
ORhpomen_gaming_hubRange<F.12
ORhpomen_gaming_hubRange<F.12
ORhpomen_gaming_hubRange<F.14
ORhpomen_gaming_hubRange<F.14
ORhpomen_gaming_hubRange<F.14
ORhpvictus_by_hp_15l_tg02-0xxx_firmwareRange<F.11
ORhp200_pro_g4_22_all-in-one_firmwareRange<F.42
ORhp200_pro_g4_22_all-in-one_firmwareRange<F.42
ORhp205_g4_22_all-in-one_firmwareRange<F.42
ORhp205_g4_22_all-in-one_firmwareRange<F.42
ORhp205_g8_24_all-in-one_pc_\(rom_family_ssid_8924\)_firmwareRange<F.11
ORhp205_g8_24_all-in-one_pc_\(rom_family_ssid_8924\)_firmwareRange<F.12
ORhp205_pro_g4_22_all-in-one_firmwareRange<F.42
ORhp205_pro_g4_22_all-in-one_firmwareRange<F.42
ORhp205_pro_g8_24_all-in-one_pc_\(rom_family_ssid_8924\)_firmwareRange<F.11
ORhp205_pro_g8_24_all-in-one_pc_\(rom_family_ssid_8924\)_firmwareRange<F.12
ORhp285_g6_microtower_\(rom_family_ssid_871e\)_firmwareRange<F.24
ORhp285_g8_microtower_\(rom_family_ssid_870e\)_firmwareRange<F.22
ORhp285_pro_g6_microtower_\(rom_family_ssid_871e\)_firmwareRange<F.24
ORhp285_pro_g8_microtower_\(rom_family_ssid_870e\)_firmwareRange<F.22
ORhp295_g8_microtower_\(rom_family_ssid_870e\)_firmwareRange<F.22
ORhpzhan_66_pro_g3_22_all-in-one_pc_firmwareRange<F.11
ORhpzhan_66_pro_g3_22_all-in-one_pc_firmwareRange<F.12
ORhpzhan_99_pro_a_g2_microtower_\(rom_family_ssid_871e\)_firmwareRange<F.24
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | elitebook_645_14_inch_g9_notebook_pc_firmware | * | cpe:2.3:o:hp:elitebook_645_14_inch_g9_notebook_pc_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_655_15.6_inch_g9_notebook_pc_firmware | * | cpe:2.3:o:hp:elitebook_655_15.6_inch_g9_notebook_pc_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_735_g5_firmware | * | cpe:2.3:o:hp:elitebook_735_g5_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_735_g6_firmware | * | cpe:2.3:o:hp:elitebook_735_g6_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_745_g5_firmware | * | cpe:2.3:o:hp:elitebook_745_g5_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_745_g6_firmware | * | cpe:2.3:o:hp:elitebook_745_g6_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_755_g5_firmware | * | cpe:2.3:o:hp:elitebook_755_g5_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_835_13_inch_g9_notebook_pc_firmware | * | cpe:2.3:o:hp:elitebook_835_13_inch_g9_notebook_pc_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_835_g7_firmware | * | cpe:2.3:o:hp:elitebook_835_g7_firmware:*:*:*:*:*:*:*:* |
| hp | elitebook_835_g8_firmware | * | cpe:2.3:o:hp:elitebook_835_g8_firmware:*:*:*:*:*:*:*:* |
Related
amd
amd
Client Vulnerabilities – May 2023
2023-05-09 00:00:00
AMD Graphics Driver Vulnerabilities – November 2022
2022-11-08 00:00:00
AMD Server Vulnerabilities – May 2023
2023-05-09 00:00:00
hp
hp
AMD Client UEFI Firmware November 2022 Security Update
2022-12-14 00:00:00
AMD Graphics Driver November 2022 Security Update
2022-11-08 00:00:00
cve
cve
cvelist
cvelist
redhatcve
redhatcve
nvd
nvd
prion
prion
Information disclosure
2023-05-09 19:15:00
Out-of-bounds
2022-11-09 21:15:00
Authorization
2022-11-09 21:15:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0.002
Percentile
52.7%
Related for HPSBHF03846