Lucene search

K
hpHP Product Security Response TeamHPSBHF03882
HistoryNov 20, 2023 - 12:00 a.m.

Intel Optane™ SSD Firmware November 2023 Security Update

2023-11-2000:00:00
HP Product Security Response Team
support.hp.com
15
intel
optane™ ssd
firmware
security
update
vulnerabilities
mitigate
threats
affected platforms
hp

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.4%

Intel has informed HP of potential security vulnerabilities in some Intel® Optane™ SSD and some Intel® Optane™ SSD DC products, which might allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities.

Intel has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.

Affected configurations

Vulners
Node
hphp_elite_dragonfly_g2Range<CB_KH_HPS3
OR
hphp_elite_x2_g8_tabletRange<CB_KH_HPS3
OR
hphp_elitebook_830_g7Range<CB_KH_HPS3
OR
hphp_elitebook_830_g8Range<CB_KH_HPS3
OR
hphp_elitebook_840_aero_g8Range<CB_KH_HPS3
OR
hphp_elitebook_840_g7Range<CB_KH_HPS3
OR
hphp_elitebook_840_g8Range<CB_KH_HPS3
OR
hphp_elitebook_850_g7Range<CB_KH_HPS3
OR
hphp_elitebook_850_g8Range<CB_KH_HPS3
OR
hphp_elitebook_x360_1030_g8Range<CB_KH_HPS3
OR
hphp_elitebook_x360_1040_g8Range<CB_KH_HPS3
OR
hphp_elitebook_x360_830_g8Range<CB_KH_HPS3
OR
hphp_probook_430_g8Range<CB_KH_HPS3
OR
hphp_probook_440_g8Range<CB_KH_HPS3
OR
hphp_probook_450_g8Range<CB_KH_HPS3
OR
hphp_probook_630_g8Range<CB_KH_HPS3
OR
hphp_probook_640_g8Range<CB_KH_HPS3
OR
hphp_probook_650_g8Range<CB_KH_HPS3
OR
hphp_zbook_firefly_14_g7Range<CB_KH_HPS3
OR
hphp_zbook_firefly_14_inch_g8_mobile_workstation_pcRange<CB_KH_HPS3
OR
hphp_zbook_firefly_15_g7Range<CB_KH_HPS3
OR
hphp_zbook_firefly_15.6_inch_g8_mobile_workstation_pcRange<CB_KH_HPS3
OR
hphp_260_g4_desktop_mini_pcRange<CB_KH_HPS3
OR
hphp_elitedesk_800_g6_desktop_mini_pcRange<CB_KH_HPS3
OR
hphp_elitedesk_800_g6_small_form_factor_pcRange<CB_KH_HPS3
OR
hphp_elitedesk_800_g6_tower_pcRange<CB_KH_HPS3
OR
hphp_elitedesk_800_g8_small_form_factor_pcRange<CB_KH_HPS3
OR
hphp_elitedesk_800_g8_tower_pcRange<CB_KH_HPS3
OR
hphp_elitedesk_880_g6_tower_pcRange<CB_KH_HPS3
OR
hphp_elitedesk_880_g8_tower_pcRange<CB_KH_HPS3
OR
hphp_eliteone_800_g6_24_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_eliteone_800_g6_27_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_prodesk_400_g5_desktop_mini_pcRange<CB_KH_HPS3
OR
hphp_prodesk_400_g6_desktop_mini_pcRange<CB_KH_HPS3
OR
hphp_prodesk_400_g7_microtower_pcRange<CB_KH_HPS3
OR
hphp_prodesk_400_g7_small_form_factor_pcRange<CB_KH_HPS3
OR
hphp_prodesk_480_g7_pci_microtower_pcRange<CB_KH_HPS3
OR
hphp_prodesk_600_g6_desktop_mini_pcRange<CB_KH_HPS3
OR
hphp_prodesk_600_g6_microtower_pcRange<CB_KH_HPS3
OR
hphp_prodesk_600_g6_pci_microtower_pcRange<CB_KH_HPS3
OR
hphp_prodesk_600_g6_small_form_factor_pcRange<CB_KH_HPS3
OR
hphp_prodesk_680_g6_pci_microtower_pcRange<CB_KH_HPS3
OR
hphp_proone_400_g6_20_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_proone_400_g6_24_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_proone_440_g6_24_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_proone_600_g6_22_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_z1_entry_tower_g6Range<CB_KH_HPS3
OR
hphp_z1_g8_tower_desktop_pcRange<CB_KH_HPS3
OR
hphp_200_pro_g4_22_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_205_pro_g8_24_all-in-one_pcRange<CB_KH_HPS3
OR
hphp_z2_mini_g4_workstationRange<HPSA
OR
hphp_z2_mini_g5_workstationRange<HPSA
OR
hphp_z2_small_form_factor_g4_workstationRange<HPSA
OR
hphp_z2_small_form_factor_g5_workstationRange<HPSA
OR
hphp_z2_tower_g4_workstationRange<HPSA
OR
hphp_z2_tower_g5_workstationRange<HPSA
OR
hphp_z4_g4_workstation_\(core-x\)Range<HPSA
OR
hphp_z4_g4_workstation_\(xeon_w\)Range<HPSA
OR
hphp_z6_g4_workstationRange<HPSA
OR
hphp_z8_g4_workstationRange<HPSA
OR
hphp_15-dw1xxxRange<CB_KH_HPS3
OR
hphp_15-dw2xxxRange<CB_KH_HPS3
OR
hphp_15-dw3xxxRange<CB_KH_HPS3
OR
hphp_15-dy2xxxRange<CB_KH_HPS3
OR
hphp_15-dy4xxxRange<CB_KH_HPS3
OR
hphp_15s-du1xxx\,_15s-dr1xxx\,_15s-dy1xxxRange<CB_KH_HPS3
OR
hphp_15s-du2xxx\,_15s-dr2xxx\,_15s-dy2xxxRange<CB_KH_HPS3
OR
hphp_15s-du3xxx\,_15s-dr3xxx\,_15s-dy3xxxRange<CB_KH_HPS3
OR
hphp_15s-fq2xxx\,_15s-fr2xxx\,_15s-fy2xxxRange<CB_KH_HPS3
OR
hphp_15s-fq4xxx\,_15s-fr4xxx\,_15s-fy4xxxRange<CB_KH_HPS3
OR
hphp_17-by0xxxRange<CB_KH_HPS3
OR
hphp_17-by1xxx\,_17t-by100Range<CB_KH_HPS3
OR
hphp_17-by2xxxRange<CB_KH_HPS3
OR
hphp_17-by4xxx\,_17t-by400Range<CB_KH_HPS3
OR
hphp_17-c1000\,_17-cn1xxx\,_17t-cn100Range<CB_KH_HPS3
OR
hphp_17g-cr0xxxRange<CB_KH_HPS3
OR
hphp_17g-cr2xxxRange<CB_KH_HPS3
OR
hphp_17g-cr3xxx\,_17q-cs3xxxRange<CB_KH_HPS3
OR
hphp_17q-cs0xxxRange<CB_KH_HPS3
OR
hphp_17q-cs1xxxRange<CB_KH_HPS3
OR
hphp_17q-cs2xxxRange<CB_KH_HPS3
OR
hphp_envy_13-ba1xxxRange<CB_KH_HPS3
OR
hphp_envy_13m-ba1xxxRange<CB_KH_HPS3
OR
hphp_envy_14-eb0xxxRange<CB_KH_HPS3
OR
hphp_envy_14-eb1xxx\,_14t-eb100Range<CB_KH_HPS3
OR
hphp_envy_15-ep1xxxRange<CB_KH_HPS3
OR
hphp_envy_17-cg1xxxRange<CB_KH_HPS3
OR
hphp_envy_17-ch0xxxRange<CB_KH_HPS3
OR
hphp_envy_17-ch1xxx\,_17t-ch100Range<CB_KH_HPS3
OR
hphp_envy_17-ch2xxxRange<CB_KH_HPS3
OR
hphp_envy_17m-cg1xxxRange<CB_KH_HPS3
OR
hphp_envy_17m-ch0xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_13-bd0xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_13-bd1xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_13m-bd0xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_13m-bd1xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_15-ed1xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_15-es0xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_15-es1xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_15-eu0xxx\,_15z-eu000Range<CB_KH_HPS3
OR
hphp_envy_x360_15m-ed1xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_15m-es0xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_15m-es1xxxRange<CB_KH_HPS3
OR
hphp_envy_x360_15m-eu0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_13-bb0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_13-bb1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_14-dv0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_14-dv1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_14-eh0xxx\,_14t-eh000Range<CB_KH_HPS3
OR
hphp_pavilion_15-eg0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_15-eg1xxx\,_15t-eg100Range<CB_KH_HPS3
OR
hphp_14s-dk1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_15-ab0xxRange<CB_KH_HPS3
OR
hphp_pavilion_590-a0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14-cd2xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14-dw1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14-dy0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14-dy1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14m-dw1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14m-dy0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14m-dy1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14q-dw1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14q-dy0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_14q-dy1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_x360_15-er0xxxRange<CB_KH_HPS3
OR
hphp_spectre_x360_14-ea0xxxRange<CB_KH_HPS3
OR
hphp_spectre_x360_14-ea0xxxRange<CB_KH_HPS3
OR
hphp_spectre_x360_14-ea2xxxRange<CB_KH_HPS3
OR
hphp_spectre_x360_15-eb0xxxRange<CB_KH_HPS3
OR
hphp_spectre_x360_15-eb1xxxRange<CB_KH_HPS3
OR
hphp_spectre_x360_16-f0xxxRange<CB_KH_HPS3
OR
hpomen_gaming_hubRange<CB_KH_HPS3
OR
hpvictus_by_hp_16-d0xxxRange<CB_KH_HPS3
OR
hphp_14-ck0xxxRange<CB_KH_HPS3
OR
hpvictus_by_hp_16-d0xxxRange<CB_KH_HPS3
OR
hphp_240_g7_pcRange<CB_KH_HPS3
OR
hphp_240_g8_pcRange<CB_KH_HPS3
OR
hphp_246_g7_pcRange<CB_KH_HPS3
OR
hphp_250_g8_pcRange<CB_KH_HPS3
OR
hphp_470_g8_pcRange<CB_KH_HPS3
OR
hphp_desktop_m01-f1xxxRange<CB_KH_HPS3
OR
hphp_desktop_m01-f2xxxRange<CB_KH_HPS3
OR
hphp_desktop_n01-f1xxxRange<CB_KH_HPS3
OR
hphp_envy_all-in-one_desktop_34-c0xxxRange<CB_KH_HPS3
OR
hphp_envy_desktop_te01-1xxxRange<CB_KH_HPS3
OR
hphp_envy_desktop_te01-2xxxRange<CB_KH_HPS3
OR
hphp_envy_desktop_te01-3xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_24-k0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_24-k1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_24-qc0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_24-qc1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_27-d0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_27-d1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_27-qc0xxxRange<CB_KH_HPS3
OR
hphp_pavilion_all-in-one_27-qc1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_desktop_tp01-1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_desktop_tp01-2xxxRange<CB_KH_HPS3
OR
hphp_pavilion_desktop_tp01-3xxxRange<CB_KH_HPS3
OR
hphp_pavilion_desktop_tp01-1xxxRange<CB_KH_HPS3
OR
hphp_pavilion_desktop_tp01-2xxxRange<CB_KH_HPS3
OR
hphp_slim_desktop_s01-af1xxxRange<CB_KH_HPS3
OR
hphp_slim_desktop_s01-af2xxxRange<CB_KH_HPS3
OR
hphp_slim_desktop_s01-pf1xxxRange<CB_KH_HPS3
OR
hphp_slim_desktop_s01-pf2xxxRange<CB_KH_HPS3
OR
hphp_desktop_190-0xxxRange<CB_KH_HPS3
OR
hphp_desktop_190-0xxxRange<CB_KH_HPS3
OR
hphp_desktop_190-0xxxRange<CB_KH_HPS3
OR
hpvictus_by_hp_15l_tg02-0xxxRange<CB_KH_HPS3
OR
hpvictus_by_hp_15l_tg02-0xxxRange<CB_KH_HPS3

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.4%

Related for HPSBHF03882