Lucene search

HP Product Security Response TeamHPSBHF03889

HistoryDec 11, 2023 - 12:00 a.m.

Intel 2023.4 IPU Out-of-Band (OOB) Processor Security Update

2023-12-1100:00:00

HP Product Security Response Team

support.hp.com

intel security update

out-of-band processor

hp affected platforms

firmware update

information disclosure

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow escalation of privilege and/or information disclosure and/or denial of service via local access. Intel is releasing firmware updates to mitigate this potential vulnerability.

Intel has released updates to mitigate the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerability. See the affected platforms listed below.

Affected configurations

Vulners

Node

hpelite_dragonfly_g2_firmwareRange<01.16.00

hpelite_dragonfly_max_firmwareRange<01.16.00

hpelite_x2_g8_tablet_firmwareRange<01.16.00

hpelitebook_830_g8_firmwareRange<01.16.00

hpelitebook_840_aero_g8_firmwareRange<01.16.00

hpelitebook_840_g8_firmwareRange<01.16.00

hpelitebook_850_g8_firmwareRange<01.16.00

hpelitebook_x360_1030_g8_firmwareRange<01.16.00

hpelitebook_x360_1040_g8_firmwareRange<01.16.00

hpelitebook_x360_830_g8_firmwareRange<01.16.00

hpprobook_430_g8_firmwareRange<01.16.00

hpprobook_440_g8_firmwareRange<01.16.00

hpprobook_450_g8_firmwareRange<01.16.00

hpprobook_630_g8_firmwareRange<01.16.00

hpprobook_640_g8_firmwareRange<01.16.00

hpprobook_650_g8_firmwareRange<01.16.00

hpzbook_firefly_14_inch_g8_mobile_workstation_pc_firmwareRange<01.16.00

hpzbook_firefly_15.6_inch_g8_mobile_workstation_pc_firmwareRange<01.16.00

hpzbook_fury_15.6_inch_g8_mobile_workstation_pc_firmwareRange<01.16.00

hpzbook_fury_17.3_inch_g8_mobile_workstation_pc_firmwareRange<01.16.00

hpzbook_power_15.6_inch_g8_mobile_workstation_pc_firmwareRange<01.16.00

hpzbook_studio_15.6_inch_g8_mobile_workstation_pc_firmwareRange<01.16.00

hpzhan_66_pro_14_g4_notebook_pc_firmwareRange<01.16.00

hpelitedesk_800_g8_desktop_mini_pc_firmwareRange<02.14.00

hpelitedesk_800_g8_small_form_factor_pc_firmwareRange<02.14.00

hpelitedesk_800_g8_tower_pc_firmwareRange<02.14.00

hpelitedesk_880_g8_tower_pc_firmwareRange<02.14.00

hpeliteone_800_g8_24_all-in-one_pc_firmwareRange<02.14.00

hpeliteone_800_g8_27_all-in-one_pc_firmwareRange<02.14.00

hpz1_g8_tower_desktop_pc_firmwareRange<02.14.00

hpengage_go_10_mobile_system_firmwareRange<01.15.00

hpz2_small_form_factor_g8_workstation_firmwareRange<01.06.05

hpz2_tower_g8_workstation_firmwareRange<01.06.05

hp349_g7_firmwareRange<F.32

hp250_g7_firmwareRange<F.47

hp256_g7_firmwareRange<F.47

hp258_g7_firmwareRange<F.47

hpengage_one_all-in-one_system_firmwareRange<F.44

hp205_g4_22_all-in-one_firmwareRange<F.37

hp205_g4_22_all-in-one_firmwareRange<F.41

hp205_g4_22_all-in-one_firmwareRange<F.37

hp205_g4_22_all-in-one_firmwareRange<F.41

hpeliteone_800_g6_24_all-in-one_firmwareRange<F.37

hpeliteone_800_g6_24_all-in-one_firmwareRange<F.41

hpeliteone_800_g6_24_all-in-one_firmwareRange<F.37

hpeliteone_800_g6_24_all-in-one_firmwareRange<F.41

hpeliteone_800_g6_24_all-in-one_firmwareRange<F.37

hpeliteone_800_g6_24_all-in-one_firmwareRange<F.41

hpeliteone_800_g6_27_all-in-one_firmwareRange<F.37

hpeliteone_800_g6_27_all-in-one_firmwareRange<F.41

hpeliteone_1000_g2_34-in_curved_all-in-one_business_firmwareRange<F.20

hphp_envy_te01-2xxx_firmwareRange<F.23

hpeliteone_800_g6_24_all-in-one_firmwareRange<F.20

hpeliteone_800_g6_27_all-in-one_firmwareRange<F.20

hphp_pavilion_gaming_tg01-2xxx_firmwareRange<F.23

hphp_pavilion_tp01-2xxx_firmwareRange<F.23

hpomen_gaming_hubRange<F.16

hpomen_gaming_hubRange<F.20

hpomen_gaming_hubRange<F.16

hpomen_gaming_hubRange<F.20

hpomen_gaming_hubRange<F.16

hpomen_gaming_hubRange<F.20

hp280_g5_small_form_factor_firmwareRange<F.32

hp280_g8_microtower_firmwareRange<F.32

hp280_pro_g5_small_form_factor_firmwareRange<F.32

hp290_g3_small_form_factor_firmwareRange<F.32

VendorProductVersionCPE
hpelite_dragonfly_g2_firmware*cpe:2.3:o:hp:elite_dragonfly_g2_firmware:*:*:*:*:*:*:*:*
hpelite_dragonfly_max_firmware*cpe:2.3:o:hp:elite_dragonfly_max_firmware:*:*:*:*:*:*:*:*
hpelite_x2_g8_tablet_firmware*cpe:2.3:o:hp:elite_x2_g8_tablet_firmware:*:*:*:*:*:*:*:*
hpelitebook_830_g8_firmware*cpe:2.3:o:hp:elitebook_830_g8_firmware:*:*:*:*:*:*:*:*
hpelitebook_840_aero_g8_firmware*cpe:2.3:o:hp:elitebook_840_aero_g8_firmware:*:*:*:*:*:*:*:*
hpelitebook_840_g8_firmware*cpe:2.3:o:hp:elitebook_840_g8_firmware:*:*:*:*:*:*:*:*
hpelitebook_850_g8_firmware*cpe:2.3:o:hp:elitebook_850_g8_firmware:*:*:*:*:*:*:*:*
hpelitebook_x360_1030_g8_firmware*cpe:2.3:o:hp:elitebook_x360_1030_g8_firmware:*:*:*:*:*:*:*:*
hpelitebook_x360_1040_g8_firmware*cpe:2.3:o:hp:elitebook_x360_1040_g8_firmware:*:*:*:*:*:*:*:*
hpelitebook_x360_830_g8_firmware*cpe:2.3:o:hp:elitebook_x360_830_g8_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	elite_dragonfly_g2_firmware	*	cpe:2.3:o:hp:elite_dragonfly_g2_firmware::::::::
hp	elite_dragonfly_max_firmware	*	cpe:2.3:o:hp:elite_dragonfly_max_firmware::::::::
hp	elite_x2_g8_tablet_firmware	*	cpe:2.3:o:hp:elite_x2_g8_tablet_firmware::::::::
hp	elitebook_830_g8_firmware	*	cpe:2.3:o:hp:elitebook_830_g8_firmware::::::::
hp	elitebook_840_aero_g8_firmware	*	cpe:2.3:o:hp:elitebook_840_aero_g8_firmware::::::::
hp	elitebook_840_g8_firmware	*	cpe:2.3:o:hp:elitebook_840_g8_firmware::::::::
hp	elitebook_850_g8_firmware	*	cpe:2.3:o:hp:elitebook_850_g8_firmware::::::::
hp	elitebook_x360_1030_g8_firmware	*	cpe:2.3:o:hp:elitebook_x360_1030_g8_firmware::::::::
hp	elitebook_x360_1040_g8_firmware	*	cpe:2.3:o:hp:elitebook_x360_1040_g8_firmware::::::::
hp	elitebook_x360_830_g8_firmware	*	cpe:2.3:o:hp:elitebook_x360_830_g8_firmware::::::::