Lucene search
HP Product Security Response TeamHPSBHF03863HistoryAug 08, 2023 - 12:00 a.m.
AMD Client UEFI Firmware August 2023 Security Update
2023-08-0800:00:00
HP Product Security Response Team
support.hp.com
7
amd
uefi firmware
security update
vulnerability
arbitrary code execution
hp
affected platforms
softpaqs
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
AMD has informed HP of a potential security vulnerability identified in some AMD client platform firmware components, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities.
AMD has released updates to mitigate the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerability. See the affected platforms listed below.
Affected configurations
Node
hphp_14_inch_laptop_pc_14-ep1xxxRange<01.12.01
ORhphp_15.6_inch_laptop_pc_15-fd1xxxRange<01.12.01
ORhphp_elitebook_835_g7Range<01.06.00
ORhphp_elitebook_845_g7Range<01.06.00
ORhphp_pavilion_plus_16_inch_laptop_pc_16-ab1xxxRange<01.06.00
ORhphp_probook_x360_435_g7Range<01.12.00
ORhphp_probook_445_g6Range<01.12.00
ORhphp_probook_455_g4Range<01.12.00
ORhphp_probook_445_g8Range<01.14.00
ORhphp_probook_455_g8Range<01.14.00
ORhphp_elitebook_735_g6Range<01.25.00
ORhphp_elitebook_745_g6Range<01.25.00
ORhphp_elitebook_835_g8Range<01.14.00
ORhphp_elitebook_845_g8Range<01.14.00
ORhphp_elitebook_855_g8Range<01.14.00
ORhphp_probook_635_aero_g8Range<01.14.00
ORhphp_probook_x360_435_g8Range<01.14.00
ORhphp_probook_445r_g6Range<01.25.00
ORhphp_probook_455r_g6Range<01.25.00
ORhphp_zhan_66_pro_14_g4Range<01.14.00
ORhphp_elitebook_835_g7Range<01.14.00
ORhphp_elitebook_845_g7Range<01.14.00
ORhphp_elitebook_855_g7Range<01.14.00
ORhphp_probook_445_g7Range<01.14.00
ORhphp_probook_455_g7Range<01.14.00
ORhphp_probook_635_aero_g7Range<01.14.00
ORhphp_probook_x360_435_g7Range<01.14.00
ORhphp_zhan_66_pro_14_g2Range<01.14.00
ORhphp_zhan_66_pro_14_inch_g5Range<01.12.01
ORhphp_elitedesk_705_g5_desktop_mini_pcRange<02.18.00
ORhphp_elitedesk_705_g5_small_form_factor_pcRange<02.18.00
ORhphp_elitedesk_805_g6_desktop_mini_pcRange<02.13.00
ORhphp_elitedesk_805_g6_small_form_factor_pcRange<02.13.00
ORhphp_elitedesk_805_g8_desktop_mini_pcRange<02.09.00
ORhphp_elitedesk_805_g8_small_form_factor_pcRange<02.09.00
ORhphp_prodesk_405_g6_desktop_mini_pcRange<02.13.00
ORhphp_prodesk_405_g6_small_form_factor_pcRange<02.13.00
ORhphp_prodesk_405_g8_desktop_mini_pcRange<02.09.00
ORhphp_prodesk_405_g8_small_form_factor_pcRange<02.09.00
ORhpradia_clientRange<01.14.00
ORhpradia_clientRange<01.25.00
ORhpradia_clientRange<01.14.01
ORhphp_zbook_firefly_15_g7_mobile_workstationRange<01.12.00
ORhphp_14-cm1xxx\,_14z-cm100Range<F.70
ORhphp_14-dk000Range<F.70
ORhphp_14-dk0xxxRange<F.70
ORhphp_14-dk1xxx\,_14z-dk100Range<F.70
ORhphp_14-em0xxxRange<F.06
ORhphp_14-fq0xxxRange<F.70
ORhphp_14-fq1xxx\,_14z-fq100Range<F.31
ORhphp_14-fq2xxx\,_14z-fq200Range<F.16
ORhphp_14g-cx1xxxRange<F.70
ORhphp_14-hr0xxxRange<F.06
ORhphp_14q-cy1xxxRange<F.70
ORhphp_14s-dk0xxxRange<F.70
ORhphp_14s-dk1xxxRange<F.70
ORhphp_14s-dm0xxxRange<F.70
ORhphp_14s-dm1xxxRange<F.70
ORhphp_14s-dp0xxxRange<F.70
ORhphp_14s-dp1xxxRange<F.70
ORhphp_14s-fq0xxxRange<F.70
ORhphp_14s-fq1xxxRange<F.31
ORhphp_14s-fq2xxxRange<F.16
ORhphp_14s-fr0xxxRange<F.70
ORhphp_14s-fr1xxxRange<F.31
ORhphp_14s-fr2xxxRange<F.16
ORhphp_14s-fy0xxxRange<F.70
ORhphp_14s-fy1xxxRange<F.31
ORhphp_14s-fy2xxxRange<F.16
ORhphp_15-db1xxx\,_15z-db100Range<F.41
ORhphp_15-ef0xxx\,_15z-ef000Range<F.69
ORhphp_15-ef1xxx\,_15z-ef100Range<F.69
ORhphp_15-ef2xxx\,_15z-ef200Range<F.31
ORhphp_15-ef3xxx\,_15z-ef300Range<F.16
ORhphp_15-fc0xxxRange<F.09
ORhphp_15g-dx1xxxRange<F.41
ORhphp_15-gw0xxxRange<F.37
ORhphp_15-kr0xxxRange<F.09
ORhphp_15q-dy1xxxRange<F.41
ORhphp_15s-eq0xxxRange<F.69
ORhphp_15s-eq1xxxRange<F.69
ORhphp_15s-eq2xxxRange<F.31
ORhphp_15s-eq3xxxRange<F.16
ORhphp_15s-er0xxxRange<F.69
ORhphp_15s-er1xxxRange<F.69
ORhphp_15s-er2xxxRange<F.31
ORhphp_15s-er3xxxRange<F.16
ORhphp_15s-ey0xxxRange<F.69
ORhphp_15s-ey1xxxRange<F.69
ORhphp_15s-ey2xxxRange<F.31
ORhphp_15s-ey3xxxRange<F.16
ORhphp_15s-gr0xxxRange<F.37
ORhphp_15s-gu0xxxRange<F.37
ORhphp_15s-gy0xxxRange<F.37
ORhphp_17-ca1xxx\,_17z-ca100Range<F.65
ORhphp_17-ca2xxx\,_17z-ca200Range<F.65
ORhphp_17-ca3xxx\,_17z-ca300Range<F.65
ORhphp_17-cp1xxx\,_17z-cp100Range<F.11
ORhphp_17-cp2xxxRange<F.13
ORhphp_17-cp3xxxRange<F.03
ORhphp_envy_x360_13-ar0xxx\,_13z-ar000Range<F.29
ORhphp_envy_x360_13-ay0xxx\,_13z-ay000Range<F.24
ORhphp_envy_x360_13-ay1xxx\,_13z-ay100Range<F.08
ORhphp_envy_x360_13m-ar0xxxRange<F.29
ORhphp_envy_x360_13m-ay0xxxRange<F.24
ORhphp_envy_x360_15-ds0xxx\,_15z-ds000Range<F.28
ORhphp_envy_x360_15-ee0xxx\,_15z-ee000Range<F.24
ORhphp_envy_x360_15-ee1xxx\,_15z-ee100Range<F.11
ORhphp_envy_x360_15-eu0xxx\,_15z-eu000Range<F.13
ORhphp_envy_x360_15-eu1xxxRange<F.06
ORhphp_envy_x360_15-ey0xxx\,_15t-ey000Range<F.14
ORhphp_envy_x360_15-ey1xxxRange<F.04
ORhphp_envy_x360_15-fh0xxxRange<F.05
ORhphp_envy_x360_15m-ds0xxxRange<F.28
ORhphp_envy_x360_15m-ee0xxxRange<F.24
ORhphp_envy_x360_15m-eu0xxxRange<F.13
ORhphp_pavilion_14-ec0xxx\,_14z-ec000Range<F.14
ORhphp_pavilion_14-ec1xxx\,_14z-ec100Range<F.07
ORhphp_pavilion_15-cw1xxx\,_15z-cw100Range<F.52
ORhphp_pavilion_15-eh0xxx\,_15z-eh000Range<F.26
ORhphp_pavilion_15-eh1xxxRange<F.26
ORhphp_pavilion_15-eh2xxx\,_15z-eh200Range<F.07
ORhphp_pavilion_15-eh3xxxRange<F.03
ORhphp_pavilion_aero_13-be0xxx\,_13z-be000Range<F.12
ORhphp_pavilion_aero_13-be1xxx\,_13z-be100Range<F.09
ORhphp_pavilion_aero_13-be2xxxRange<F.12
ORhphp_pavilion_14-ec0xxxRange<F.18
ORhphp_pavilion_14-ec1xxx\,_14z-ec100Range<F.31
ORhphp_pavilion_15-cw1xxx\,_15z-cw100Range<F.25
ORhphp_zhan_99_g2_mobile_workstationRange<F.19
ORhphp_15-db1xxx\,_15z-db100Range<F.21
ORhpvictus_by_hp_15-fa1xxxRange<F.23
ORhpvictus_by_hp_16-d0xxxRange<F.21
ORhpomen_gaming_hubRange<F.17
ORhpvictus_by_hp_16-e0xxxRange<F.18
ORhpvictus_by_hp_16-e1xxx\,_16z-e100Range<F.19
ORhpvictus_by_hp_15-fa1xxxRange<F.18
ORhphp_245_g10Range<F.06
ORhphp_245_g8_pcRange<F.26
ORhphp_245_pcRange<F.11
ORhphp_245_pcRange<F.11
ORhphp_247_g8_pcRange<F.70
ORhphp_255_g10Range<F.09
ORhphp_255_g7Range<F.41
ORhphp_255_g8_pcRange<F.37
ORhphp_255_g8_pcRange<F.37
ORhphp_255_g8_pcRange<F.12
ORhphp_zhan_99_g2_mobile_workstationRange<F.25
ORhphp_zhan_99_g4_mobile_workstationRange<F.09
ORhphp_all-in-one_21-b1xxxRange<F.33
ORhphp_all-in-one_22-c1xxxRange<F.34
ORhphp_all-in-one_22-dd0xxxRange<F.50
ORhphp_all-in-one_22-dd0xxxRange<F.50
ORhphp_all-in-one_22-df0xxxRange<F.50
ORhphp_all-in-one_22-df0xxxRange<F.50
ORhphp_all-in-one_24-cb0xxxRange<F.20
ORhphp_all-in-one_24-cb0xxxRange<F.20
ORhphp_all-in-one_24-cb1xxxRange<F.16
ORhphp_all-in-one_24-ck0xxxRange<F.16
ORhphp_all-in-one_24-cr0xxxRange<F.05
ORhphp_all-in-one_24-cr0xxxRange<F.05
ORhphp_all-in-one_24-dd0xxxRange<F.50
ORhphp_all-in-one_24-dd0xxxRange<F.50
ORhphp_all-in-one_24-df0xxxRange<F.50
ORhphp_all-in-one_24-df0xxxRange<F.50
ORhphp_all-in-one_24-dp0xxxRange<F.46
ORhphp_all-in-one_24-dp0xxxRange<F.50
ORhphp_all-in-one_24-dp0xxxRange<F.50
ORhphp_all-in-one_24-f1xxxRange<F.34
ORhphp_all-in-one_27-cb0xxxRange<F.20
ORhphp_all-in-one_27-cb0xxxRange<F.20
ORhphp_all-in-one_27-cb1xxxRange<F.16
ORhphp_all-in-one_27-cr0xxxRange<F.05
ORhphp_all-in-one_27-cr0xxxRange<F.05
ORhphp_all-in-one_27-dp0xxxRange<F.46
ORhphp_all-in-one_27-dp0xxxRange<F.50
ORhphp_envy_te01-0xxxRange<F.46
ORhphp_envy_te01-1xxxRange<F40
ORhphp_m01-d0xxxRange<F.46
ORhphp_m01-d1xxxRange<F40
ORhphp_m01-f0xxxRange<F.46
ORhphp_m01-f1xxxRange<F40
ORhphp_m01-f3xxxRange<F.20
ORhphp_n01-f2xxxRange<F.20
ORhphp_pavilion_all-in-one_24-ca0xxxRange<F.20
ORhphp_pavilion_all-in-one_24-ca1xxxRange<F.16
ORhphp_pavilion_all-in-one_24-k0xxxRange<F.15
ORhphp_pavilion_all-in-one_24-qb1xxxRange<F.34
ORhphp_pavilion_all-in-one_24-qc0xxxRange<F.15
ORhphp_pavilion_all-in-one_24-xa1xxxRange<F.34
ORhphp_pavilion_all-in-one_27-ca0xxxRange<F.20
ORhphp_pavilion_all-in-one_27-ca1xxxRange<F.16
ORhphp_pavilion_all-in-one_27-d0xxxRange<F.15
ORhphp_pavilion_all-in-one_27-qb1xxxRange<F.34
ORhphp_pavilion_all-in-one_27-qc0xxxRange<F.15
ORhphp_pavilion_all-in-one_27-xa1xxxRange<F.34
ORhphp_pavilion_tp01-0xxxRange<F.46
ORhphp_pavilion_tp01-1xxxRange<F40
ORhphp_pavilion_tp01-2xxxRange<F.30
ORhphp_pavilion_tp01-0xxxRange<F.46
ORhphp_pavilion_tp01-1xxxRange<F40
ORhphp_pavilion_tp01-2xxxRange<F.30
ORhphp_slim_s01-af0xxxRange<F.38
ORhphp_desktop_190-0xxxRange<F.27
ORhphp_envy_desktop_te01-1xxxRange<F.17
ORhphp_envy_desktop_te01-1xxxRange<F.17
ORhphp_desktop_190-0xxxRange<F.27
ORhphp_envy_desktop_te01-1xxxRange<F.17
ORhpomen_gaming_hubRange<F.12
ORhpvictus_by_hp_15l_tg02-0xxxRange<F.30
ORhpvictus_by_hp_15l_tg02-0xxxRange<F.30
ORhpvictus_by_hp_15l_tg02-0xxxRange<F.30
ORhpvictus_by_hp_15l_tg02-0xxxRange<F.30
ORhpomen_gaming_hubRange<F.16
ORhpomen_gaming_hubRange<F.27
ORhpvictus_by_hp_15l_tg02-0xxxRange<F.20
ORhphp_200_g4_22_all-in-one_pcRange<F.50
ORhphp_200_g4_22_all-in-one_pcRange<F.50
ORhphp_200_pro_g4_22_all-in-one_pcRange<F.50
ORhphp_200_pro_g4_22_all-in-one_pcRange<F.50
ORhphp_205_g4_22_all-in-one_pcRange<F.50
ORhphp_205_g4_22_all-in-one_pcRange<F.50
ORhphp_205_g8_24_all-in-one_pcRange<F.20
ORhphp_205_g8_24_all-in-one_pcRange<F.20
ORhphp_205_g8_24_all-in-one_pcRange<F.16
ORhphp_205_pro_g4_22_all-in-one_pcRange<F.50
ORhphp_205_pro_g4_22_all-in-one_pcRange<F.50
ORhphp_205_pro_g8_24_all-in-one_pcRange<F.20
ORhphp_205_pro_g8_24_all-in-one_pcRange<F.20
ORhphp_205_pro_g8_24_all-in-one_pcRange<F.16
ORhphp_285_g6_microtower_pcRange<F.26
ORhphp_285_g8_microtower_pcRange<F.30
ORhphp_285_pro_g6_microtower_pcRange<F.26
ORhphp_285_pro_g8_microtower_pcRange<F.30
ORhphp_295_g8_microtower_pcRange<F.30
ORhphp_zhan_66_pro_g1Range<F.05
ORhphp_zhan_66_pro_14_g4Range<F.20
ORhphp_zhan_66_pro_14_g4Range<F.20
ORhphp_zhan_66_pro_14_g4Range<F.16
ORhphp_zhan_99_pro_g2_microtower_pcRange<F.26
Related
prion
prion
Input validation
2023-08-08 18:15:00
nvd
nvd
CVE-2023-20555
2023-08-08 18:15:11
amd
amd
SMM Memory Corruption Vulnerability
2023-08-08 00:00:00
cve
cve
CVE-2023-20555
2023-08-08 18:15:11
redhatcve
redhatcve
CVE-2023-20555
2023-09-28 07:24:53
cvelist
cvelist
CVE-2023-20555
2023-08-08 17:07:24
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for HPSBHF03863