Lucene search

HP Product Security Response TeamHPSBHF03797

HistoryJun 14, 2022 - 12:00 a.m.

Synaptics Fingerprint SGX-enabled Driver June 2022 Security Update

2022-06-1400:00:00

HP Product Security Response Team

support.hp.com

synaptics

fingerprint

sgx-enabled

driver

security update

potential vulnerability

mitigation

affected platforms

softpaqs

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Synaptics has informed HP of a potential security vulnerability identified in Synaptics® Fingerprint drivers that use SGX which may allow denial of service and information disclosure. Synaptics has released mitigation for this potential vulnerability.

Synaptics has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.

Affected configurations

Vulners

Node

hpenvy_13-aq0xxxRange<6.0.60.1111

hpenvy_-_13t-aq100Range<6.0.60.1111

hpenvy_-_17t-ce000Range<6.0.60.1111

hpenvy_-_17t-ce100Range<6.0.60.1111

hpenvy_17m-ce0xxxRange<6.0.60.1111

hpenvy_17m-ce1xxxRange<6.0.60.1111

hpenvy_x360_-_15t-dr000Range<6.0.60.1111

hpenvy_x360_-_15t-dr100Range<6.0.60.1111

hpenvy_15m-dr0xxx_x360Range<6.0.60.1111

hpenvy_15m-dr1xxx_x360Range<6.0.60.1111

hppavilion_x360_14t-dh000Range<5.5.14.1116

hppavilion_x360_-_14t-cd000Range<5.5.14.1116

hppavilion_14m-dh0xxx_x360Range<5.5.14.1116

hppavilion_14m-cd0xxx_x360Range<5.5.14.1116

hppavilion_x360_convertible_14q-dh0xxxRange<5.5.14.1116

hppavilion_x360_convertible_14q-cd0xxxRange<5.5.14.1116

hppavilion_x360_-_15t-dq000Range<5.5.14.1116

hppavilion_x360_-_15t-dq100Range<5.5.14.1116

hpspectre_x360_convertible_13-ap0xxxRange<5.5.34.1102

hpspectre_x360_convertible_15-df0xxxRange<5.5.34.1102

hpspectre_x360_15-eb0xxxRange<5.5.34.1102

hpspectre_15t-eb000Range<6.0.60.1111

VendorProductVersionCPE
hpenvy_13-aq0xxx*cpe:2.3:h:hp:envy_13-aq0xxx:*:*:*:*:*:*:*:*
hpenvy_-_13t-aq100*cpe:2.3:h:hp:envy_-_13t-aq100:*:*:*:*:*:*:*:*
hpenvy_-_17t-ce000*cpe:2.3:h:hp:envy_-_17t-ce000:*:*:*:*:*:*:*:*
hpenvy_-_17t-ce100*cpe:2.3:h:hp:envy_-_17t-ce100:*:*:*:*:*:*:*:*
hpenvy_17m-ce0xxx*cpe:2.3:h:hp:envy_17m-ce0xxx:*:*:*:*:*:*:*:*
hpenvy_17m-ce1xxx*cpe:2.3:h:hp:envy_17m-ce1xxx:*:*:*:*:*:*:*:*
hpenvy_x360_-_15t-dr000*cpe:2.3:h:hp:envy_x360_-_15t-dr000:*:*:*:*:*:*:*:*
hpenvy_x360_-_15t-dr100*cpe:2.3:h:hp:envy_x360_-_15t-dr100:*:*:*:*:*:*:*:*
hpenvy_15m-dr0xxx_x360*cpe:2.3:h:hp:envy_15m-dr0xxx_x360:*:*:*:*:*:*:*:*
hpenvy_15m-dr1xxx_x360*cpe:2.3:h:hp:envy_15m-dr1xxx_x360:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	envy_13-aq0xxx	*	cpe:2.3:h:hp:envy_13-aq0xxx::::::::
hp	envy_-_13t-aq100	*	cpe:2.3:h:hp:envy_-_13t-aq100::::::::
hp	envy_-_17t-ce000	*	cpe:2.3:h:hp:envy_-_17t-ce000::::::::
hp	envy_-_17t-ce100	*	cpe:2.3:h:hp:envy_-_17t-ce100::::::::
hp	envy_17m-ce0xxx	*	cpe:2.3:h:hp:envy_17m-ce0xxx::::::::
hp	envy_17m-ce1xxx	*	cpe:2.3:h:hp:envy_17m-ce1xxx::::::::
hp	envy_x360_-_15t-dr000	*	cpe:2.3:h:hp:envy_x360_-_15t-dr000::::::::
hp	envy_x360_-_15t-dr100	*	cpe:2.3:h:hp:envy_x360_-_15t-dr100::::::::
hp	envy_15m-dr0xxx_x360	*	cpe:2.3:h:hp:envy_15m-dr0xxx_x360::::::::
hp	envy_15m-dr1xxx_x360	*	cpe:2.3:h:hp:envy_15m-dr1xxx_x360::::::::

Rows per page:

1-10 of 221

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for HPSBHF03797