CVE-2019-16284
05.11.2019, 21:15
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.Enginsight
| Vendor | Product | Version |
|---|---|---|
| hp | 260_g1_dm_firmware | 𝑥 < 2.27 |
| hp | 280_pro_g1_firmware | 𝑥 < 80.3 |
| hp | elite_slice_firmware | 𝑥 < 2.42 |
| hp | elite_x2_1011_g1_firmware | 𝑥 < 1.27 |
| hp | elite_x2_1012_g1_firmware | 𝑥 < 1.42 |
| hp | elitebook_1030_g1_firmware | 𝑥 < 1.42 |
| hp | elitebook_1040_g2_firmware | 𝑥 < 1.17 |
| hp | elitebook_720_g1__firmware | 𝑥 < 1.48 |
| hp | elitebook_720_g2_firmware | 𝑥 < 1.29 |
| hp | elitebook_740_g1_firmware | 𝑥 < 1.48 |
| hp | elitebook_740_g2_firmware | 𝑥 < 1.29 |
| hp | elitebook_750_g1_firmware | 𝑥 < 1.48 |
| hp | elitebook_750_g2_firmware | 𝑥 < 1.29 |
| hp | elitebook_820_g1_firmware | 𝑥 < 1.48 |
| hp | elitebook_820_g2_firmware | 𝑥 < 1.29 |
| hp | elitebook_820_g3_firmware | 𝑥 < 1.42 |
| hp | elitebook_828_g3_firmware | 𝑥 < 1.42 |
| hp | elitebook_840_g1_firmware | 𝑥 < 1.48 |
| hp | elitebook_840_g2_firmware | 𝑥 < 1.29 |
| hp | elitebook_840_g3_firmware | 𝑥 < 1.42 |
| hp | elitebook_848_g3_firmware | 𝑥 < 1.42 |
| hp | elitebook_850_g1_firmware | 𝑥 < 1.48 |
| hp | elitebook_850_g2_firmware | 𝑥 < 1.29 |
| hp | elitebook_850_g3_firmware | 𝑥 < 1.42 |
| hp | elitebook_folio_1020_g1_firmware | 𝑥 < 1.24 |
| hp | elitebook_folio_1020_g1_firmware | 𝑥 < 1.24 |
| hp | elitebook_folio_1040_g1_firmware | 𝑥 < 1.44 |
| hp | elitebook_folio_1040_g3_firmware | 𝑥 < 1.42 |
| hp | elitebook_folio_9480m_firmware | 𝑥 < 1.49 |
| hp | elitebook_folio_g1_firmware | 𝑥 < 1.42 |
| hp | elitebook_revolve_810_g2_firmware | 𝑥 < 1.45 |
| hp | elitebook_revolve_810_g3_firmware | 𝑥 < 1.2 |
| hp | elitedesk_800_g2_dm_firmware | 𝑥 < 2.42 |
| hp | elitedesk_800_g2_sff_firmware | 𝑥 < 2.42 |
| hp | elitedesk_800_g2_twr_firmware | 𝑥 < 2.42 |
| hp | eliteone_800_g2_aio_firmware | 𝑥 < 2.42 |
| hp | elitepad_1000_g2_firmware | 𝑥 < 1.48 |
| hp | mp9_g2_retail_system_firmware | 𝑥 < 2.42 |
| hp | pro_tablet_10_ee_g1_firmware | 𝑥 < 1.31 |
| hp | pro_tablet_608_g1_firmware | 𝑥 < 1.21 |
| hp | pro_x2_612_g1_firmware | 𝑥 < 1.48 |
| hp | probook_11_g1_firmware | 𝑥 < 1.17 |
| hp | probook_11_g2_firmware | 𝑥 < 1.42 |
| hp | probook_430_g1_firmware | 𝑥 < 1.49 |
| hp | probook_430_g2_firmware | 𝑥 < 1.52 |
| hp | probook_430_g3_firmware | 𝑥 < 1.42 |
| hp | probook_440_g1_firmware | 𝑥 < 1.49 |
| hp | probook_440_g2_firmware | 𝑥 < 1.52 |
| hp | probook_440_g3_firmware | 𝑥 < 1.42 |
| hp | probook_450_g1_firmware | 𝑥 < 1.49 |
| hp | probook_450_g2_firmware | 𝑥 < 1.52 |
| hp | probook_450_g3_firmware | 𝑥 < 1.42 |
| hp | probook_470_g1_firmware | 𝑥 < 1.49 |
| hp | probook_470_g2_firmware | 𝑥 < 1.52 |
| hp | probook_470_g3_firmware | 𝑥 < 1.42 |
| hp | probook_640_g1_firmware | 𝑥 < 1.49 |
| hp | probook_640_g2_firmware | 𝑥 < 1.42 |
| hp | probook_650_g1_firmware | 𝑥 < 1.49 |
| hp | probook_650_g2_firmware | 𝑥 < 1.42 |
| hp | probook_x360_11_g1_firmware | 𝑥 < 1.3 |
| hp | prodesk_400_g1_dm_firmware | 𝑥 < 2.27 |
| hp | prodesk_400_g2_dm_firmware | 𝑥 < 2.42 |
| hp | prodesk_400_g2.5_sff_firmware | 𝑥 < 2.26 |
| hp | prodesk_400_g3_sff_firmware | 𝑥 < 2.42 |
| hp | prodesk_405_g2_mt_firmware | 𝑥 < 2.29 |
| hp | prodesk_485_g2_mt_firmware | 𝑥 < 2.29 |
| hp | prodesk_480_g3_sff_firmware | 𝑥 < 2.42 |
| hp | prodesk_490_g2_mt_firmware | 𝑥 < 2.31 |
| hp | prodesk_490_g3_sff_firmware | 𝑥 < 2.42 |
| hp | prodesk_498_g2_mt_firmware | 𝑥 < 2.31 |
| hp | prodesk_498_g3_sff_firmware | 𝑥 < 2.42 |
| hp | prodesk_600_g2_dm_firmware | 𝑥 < 2.42 |
| hp | prodesk_600_g2_sff_firmware | 𝑥 < 2.42 |
| hp | proone_400_g2_aio_firmware | 𝑥 < 2.42 |
| hp | proone_600_g2_aio_firmware | 𝑥 < 2.42 |
| hp | rp2_retail_system_firmware | 𝑥 < 2.21 |
| hp | rp9_g1_retail_system_9015_firmware | 𝑥 < 2.42 |
| hp | rp9_g1_retail_system_9018_firmware | 𝑥 < 2.42 |
| hp | zbook_14_g2_firmware | 𝑥 < 1.29 |
| hp | zbook_14_firmware | 𝑥 < 1.48 |
| hp | zbook_15_g2_firmware | 𝑥 < 1.25 |
| hp | zbook_15_g3_firmware | 𝑥 < 1.42 |
| hp | zbook_15_firmware | 𝑥 < 1.46 |
| hp | zbook_15u_g2_firmware | 𝑥 < 1.29 |
| hp | zbook_15u_g3_firmware | 𝑥 < 1.42 |
| hp | zbook_17_g2_firmware | 𝑥 < 1.25 |
| hp | zbook_17_g3_firmware | 𝑥 < 1.42 |
| hp | zbook_17_firmware | 𝑥 < 1.46 |
| hp | zbook_studio_g3_firmware | 𝑥 < 1.42 |
| hp | z1_g3_firmware | 𝑥 < 1.26 |
| hp | z2_mini_g3_firmware | 𝑥 < 1.77 |
| hp | z238_microtower_firmware | 𝑥 < 1.77 |
| hp | z240_sff_firmware | 𝑥 < 1.77 |
| hp | z240_tower_firmware | 𝑥 < 1.77 |
𝑥
= Vulnerable software versions