Lucene search

K
hpHP Product Security Response TeamHPSBHF03936
HistoryMay 14, 2024 - 12:00 a.m.

Intel BIOS Guard and PPAM Firmware May 2024 Security Update

2024-05-1400:00:00
HP Product Security Response Team
support.hp.com
27
intel
bios guard
ppam
firmware
security vulnerabilities
privilege escalation
hp
softpaqs
affected platforms
mitigation
software

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

AI Score

7.6

Confidence

Low

EPSS

0

Percentile

9.0%

Intel has informed HP of potential security vulnerabilities in some Intel® BIOS Guard and Platform Properties Assessment Module (PPAM) firmware, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities.

Intel has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.

Affected configurations

Vulners
Node
hpdragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmwareRange<01.10.00
OR
hpelite_dragonfly_13.5_inch_g3_notebook_pc_firmwareRange<01.10.01
OR
hphp_elite_dragonfly_g2Range<01.16.00
OR
hphp_elite_dragonfly_maxRange<01.16.00
OR
hpelite_x2_1013_g3_firmwareRange<01.27.00
OR
hphp_elite_x2_g4Range<01.27.00
OR
hphp_elite_x2_g8_tabletRange<01.16.00
OR
hpelite_x360_1040_14_inch_g9_2-in-1_notebook_pc_firmwareRange<01.10.00
OR
hpelite_x360_830_13_inch_g9_2-in-1_notebook_pc_firmwareRange<01.10.00
OR
hpelitebook_1040_14_inch_g9_notebook_pc_firmwareRange<01.10.00
OR
hphp_elitebook_1040_g4Range<1.49
OR
hphp_elitebook_1050_g1Range<01.27.00
OR
hpelitebook_630_13_inch_g9_notebook_pc_firmwareRange<01.11.04
OR
hpelitebook_640_14_inch_g9_notebook_pc_firmwareRange<01.11.04
OR
hpelitebook_650_15.6_inch_g9_notebook_pc_firmwareRange<01.11.04
OR
hpelitebook_830_13.3_inch_g9_notebook_pc_firmwareRange<01.10.00
OR
hphp_elitebook_830_g5Range<01.27.00
OR
hphp_elitebook_830_g6Range<01.27.00
OR
hphp_elitebook_830_g7Range<01.16.00
OR
hphp_elitebook_830_g8Range<01.16.00
OR
hphp_elitebook_836_g5Range<01.27.00
OR
hphp_elitebook_836_g6Range<01.27.00
OR
hpelitebook_840_14_inch_g9_notebook_pc_firmwareRange<01.10.00
OR
hphp_elitebook_840_aero_g8Range<01.16.00
OR
hphp_elitebook_840_g5Range<01.27.00
OR
hpelitebook_840_g5_healthcare_edition_firmwareRange<01.27.00
OR
hphp_elitebook_840_g6Range<01.27.00
OR
hpelitebook_840_g6_healthcare_edition_firmwareRange<01.27.00
OR
hphp_elitebook_840_g7Range<01.16.00
OR
hphp_elitebook_840_g8Range<01.16.00
OR
hphp_elitebook_840r_g4Range<01.27.00
OR
hphp_elitebook_846_g5Range<01.27.00
OR
hphp_elitebook_850_g5Range<01.27.00
OR
hphp_elitebook_850_g6Range<01.27.00
OR
hphp_elitebook_850_g7Range<01.16.00
OR
hphp_elitebook_850_g8Range<01.16.00
OR
hpelitebook_860_16_inch_g9_notebook_pc_firmwareRange<01.10.00
OR
hpelitebook_x360_1030_g3_firmwareRange<01.27.00
OR
hphp_elitebook_x360_1030_g4Range<01.27.00
OR
hphp_elitebook_x360_1030_g7Range<01.16.00
OR
hphp_elitebook_x360_1030_g8Range<01.16.00
OR
hphp_elitebook_x360_1040_g5Range<01.27.00
OR
hphp_elitebook_x360_1040_g6Range<01.27.00
OR
hphp_elitebook_x360_1040_g7Range<01.16.00
OR
hphp_elitebook_x360_1040_g8Range<01.16.00
OR
hphp_elitebook_x360_830_g5Range<01.27.00
OR
hphp_elitebook_x360_830_g6Range<01.27.00
OR
hphp_elitebook_x360_830_g8Range<01.16.00
OR
hppro_x360_fortis_11_inch_g10_notebook_pc_firmwareRange<01.09.00
OR
hppro_x360_fortis_11_inch_g10_notebook_pc_firmwareRange<v01.06.00
OR
hphp_probook_430_g5Range<01.27.00
OR
hphp_probook_430_g6Range<01.27.00
OR
hphp_probook_430_g7Range<01.20.00
OR
hphp_probook_430_g8Range<01.16.00
OR
hpprobook_440_14_inch_g9_notebook_pc_firmwareRange<01.10.00
OR
hphp_probook_440_g5Range<01.27.00
OR
hphp_probook_440_g6Range<01.27.00
OR
hphp_probook_440_g7Range<01.20.00
OR
hphp_probook_440_g8Range<01.16.00
OR
hpprobook_450_15.6_inch_g9_notebook_pc_firmwareRange<01.10.00
OR
hphp_probook_450_g5Range<01.27.00
OR
hphp_probook_450_g6Range<01.27.00
OR
hphp_probook_450_g7Range<01.20.00
OR
hphp_probook_450_g8Range<01.16.00
OR
hphp_probook_470_g5Range<01.27.00
OR
hphp_probook_630_g8Range<01.16.00
OR
hpprobook_640_g3_firmwareRange<1.49
OR
hphp_probook_640_g4Range<01.27.00
OR
hphp_probook_640_g5Range<01.27.00
OR
hphp_probook_640_g7Range<01.16.00
OR
hphp_probook_640_g8Range<01.16.00
OR
hpprobook_650_g3_firmwareRange<1.49
OR
hphp_probook_650_g4Range<01.27.00
OR
hphp_probook_650_g4Range<01.27.00
OR
hphp_probook_650_g5Range<01.27.00
OR
hphp_probook_650_g7Range<01.16.00
OR
hphp_probook_650_g8Range<01.16.00
OR
hpprobook_fortis_14_inch_g10_notebook_pc_firmwareRange<01.09.00
OR
hphp_probook_x360_11_g2_eeRange<1.51
OR
hphp_probook_x360_11_g6_eeRange<01.18.00
OR
hphp_probook_x360_440_g1Range<01.27.00
OR
hphp_zbook_14u_g5Range<01.27.00
OR
hphp_zbook_14u_g6Range<01.27.00
OR
hphp_zbook_15_g4Range<1.49
OR
hphp_zbook_15_g5Range<01.27.00
OR
hphp_zbook_15_g6Range<01.27.00
OR
hphp_zbook_15u_g5Range<01.27.00
OR
hphp_zbook_15u_g6Range<01.27.00
OR
hphp_zbook_17_g4Range<1.49
OR
hphp_zbook_17_g5Range<01.27.00
OR
hphp_zbook_17_g6Range<01.27.00
OR
hphp_zbook_create_g7Range<01.16.00
OR
hphp_zbook_firefly_14_g7Range<01.16.00
OR
hphp_zbook_firefly_14_inch_g8_mobile_workstation_pcRange<01.16.00
OR
hpzbook_firefly_14_inch_g9_mobile_workstation_pc_firmwareRange<01.10.00
OR
hphp_zbook_firefly_15_g7Range<01.16.00
OR
hphp_zbook_firefly_15.6_inch_g8_mobile_workstation_pcRange<01.16.00
OR
hpzbook_firefly_16_inch_g9_mobile_workstation_pc_firmwareRange<01.10.00
OR
hphp_zbook_fury_15_g7Range<01.16.00
OR
hphp_zbook_fury_15.6_inch_g8_mobile_workstation_pcRange<01.16.00
OR
hphp_zbook_fury_16_g10_mobile_workstation_pcRange<01.04.00
OR
hpzbook_fury_16_g9_mobile_workstation_pc_firmwareRange<01.10.00
OR
hphp_zbook_fury_17_g7Range<01.16.00
OR
hphp_zbook_fury_17.3_inch_g8_mobile_workstation_pcRange<01.16.00
OR
hpzbook_power_15.6_inch_g8_mobile_workstation_pc_firmwareRange<01.16.00
OR
hpzbook_power_15.6_inch_g9_mobile_workstation_pc_firmwareRange<01.10.00
OR
hpzbook_power_g7_firmwareRange<01.16.00
OR
hphp_zbook_studio_15.6_inch_g8_mobile_workstation_pcRange<01.16.00
OR
hpzbook_studio_16_inch_g9_mobile_workstation_pc_firmwareRange<01.10.00
OR
hphp_zbook_studio_g4Range<1.49
OR
hphp_zbook_studio_g5Range<01.27.00
OR
hphp_zbook_studio_g7Range<01.16.00
OR
hphp_zbook_studio_x360_g5Range<01.27.00
OR
hphp_zhan_66_pro_13_g2Range<01.27.00
OR
hphp_zhan_66_pro_14_g2Range<01.27.00
OR
hpzhan_66_pro_14_g3_firmwareRange<01.20.00
OR
hpzhan_66_pro_14_g4_notebook_pc_firmwareRange<01.16.00
OR
hpzhan_66_pro_14_inch_g5_notebook_pc_firmwareRange<01.10.00
OR
hphp_zhan_66_pro_15_g2Range<01.27.00
OR
hpzhan_66_pro_15_g3_firmwareRange<01.20.00
OR
hphp_zhan_66_pro_g1Range<01.27.00
OR
hphp_zhan_x_13_g2Range<01.27.00
OR
hphp_260_g4_desktop_mini_pcRange<02.18
OR
hpelite_mini_600_g9_desktop_pcRange<02.13.02
OR
hpelite_mini_800_g9_desktop_pcRange<02.13.02
OR
hpelite_sff_600_g9_desktop_pc_firmwareRange<02.13.03
OR
hpelite_sff_800_g9_desktop_pc_firmwareRange<02.13.03
OR
hpelite_slice_g2_-_audio_ready_with_zoom_rooms_firmwareRange<02.64
OR
hpelite_slice_g2_-_partner_ready_with_microsoft_teams_rooms_firmwareRange<02.64
OR
hpelite_slice_g2_with_microsoft_teams_rooms_firmwareRange<02.64
OR
hphp_elite_slice_g2_with_intel_uniteRange<02.64
OR
hpelite_slice_g2_with_zoom_rooms_firmwareRange<02.64
OR
hpelite_tower_600_g9_desktop_pc_firmwareRange<02.13.03
OR
hpelite_tower_680_g9_desktop_pc_firmwareRange<02.13.03
OR
hpelite_tower_800_g9_desktop_pc_firmwareRange<02.13.03
OR
hpelite_tower_880_g9_desktop_pc_firmwareRange<02.13.03
OR
hpelitedesk_800_35w_g3_desktop_mini_pc_firmwareRange<02.49
OR
hphp_elitedesk_800_35w_g4_desktop_mini_pcRange<02.27.00
OR
hpelitedesk_800_65w_g3_desktop_mini_pc_firmwareRange<02.49
OR
hphp_elitedesk_800_65w_g4_desktop_mini_pcRange<02.27.00
OR
hphp_elitedesk_800_95w_g4_desktop_mini_pcRange<02.27.00
OR
hpelitedesk_800_g3_small_form_factor_pc_firmwareRange<02.49
OR
hpelitedesk_800_g3_tower_pc_firmwareRange<02.49
OR
hphp_elitedesk_800_g4_small_form_factor_pcRange<02.27.00
OR
hphp_elitedesk_800_g4_tower_pcRange<02.27.00
OR
hpelitedesk_800_g4_workstation_edition_firmwareRange<02.27.00
OR
hphp_elitedesk_800_g5_desktop_mini_pcRange<02.20.00
OR
hphp_elitedesk_800_g5_small_form_factor_pcRange<02.20.00
OR
hphp_elitedesk_800_g5_tower_pcRange<02.20.00
OR
hphp_elitedesk_800_g6_desktop_mini_pcRange<02.18.00
OR
hphp_elitedesk_800_g6_small_form_factor_pcRange<02.18.00
OR
hphp_elitedesk_800_g6_tower_pcRange<02.18.00
OR
hphp_elitedesk_800_g8_desktop_mini_pcRange<02.15.00
OR
hphp_elitedesk_800_g8_small_form_factor_pcRange<02.15.00
OR
hphp_elitedesk_800_g8_tower_pcRange<02.15.00
OR
hpelitedesk_880_g3_tower_pc_firmwareRange<02.49
OR
hphp_elitedesk_880_g4_tower_pcRange<02.27.00
OR
hphp_elitedesk_880_g5_tower_pcRange<02.20.00
OR
hphp_elitedesk_880_g6_tower_pcRange<02.18.00
OR
hphp_elitedesk_880_g8_tower_pcRange<02.15.00
OR
hphp_eliteone_1000_g2_23.8-in_all-in-oneRange<02.27.00
OR
hpeliteone_1000_g2_23.8-in_touch_all-in-one_business_pc_firmwareRange<02.27.00
OR
hphp_eliteone_1000_g2_27-in_4k_uhd_all-in-oneRange<02.27.00
OR
hphp_eliteone_1000_g2_34-in_curved_all-in-oneRange<02.27.00
OR
hpeliteone_800_g3_23.8_non-touch_healthcare_edition_all-in-one_business_pc_firmwareRange<02.49
OR
hpeliteone_800_g3_23.8-inch_non-touch_all-in-one_pc_firmwareRange<02.49
OR
hpeliteone_800_g3_23.8-inch_non-touch_gpu_all-in-one_pc_firmwareRange<02.49
OR
hpeliteone_800_g3_23.8-inch_touch_all-in-one_pc_firmwareRange<02.49
OR
hpeliteone_800_g3_23.8-inch_touch_gpu_all-in-one_pc_firmwareRange<02.49
OR
hpeliteone_800_g4_23.8-in_healthcare_edition_all-in-one_business_pc_firmwareRange<02.27.00
OR
hphp_eliteone_800_g4_23.8-inch_non-touch_all-in-one_pcRange<02.27.00
OR
hphp_eliteone_800_g4_23.8-inch_non-touch_gpu_all-in-one_pcRange<02.27.00
OR
hphp_eliteone_800_g4_23.8-inch_touch_all-in-one_pcRange<02.27.00
OR
hphp_eliteone_800_g4_23.8-inch_touch_gpu_all-in-one_pcRange<02.27.00
OR
hpeliteone_800_g5_23.8-in_healthcare_edition_all-in-one_firmwareRange<02.20.00
OR
hphp_eliteone_800_g5_23.8-inch_all-in-oneRange<02.20.00
OR
hphp_eliteone_800_g6_24_all-in-one_pcRange<02.18.01
OR
hphp_eliteone_800_g6_27_all-in-one_pcRange<02.18.01
OR
hphp_eliteone_800_g8_24_all-in-one_pcRange<02.15.00
OR
hphp_eliteone_800_g8_27_all-in-one_pcRange<02.15.00
OR
hpeliteone_840_23.8_inch_g9_all-in-one_firmwareRange<02.13.02 
OR
hpeliteone_870_27_inch_g9_all-in-one_desktop_pc_firmwareRange<02.13.02 
OR
hpmini_conferencing_pc_with_zoom_roomsRange<02.13.02
OR
hphp_all-in-one_24-dp1xxxRange<02.13.02 
OR
hphp_all-in-one_27-dp1xxxRange<02.13.02 
OR
hpelite_slice_g2_with_microsoft_teams_rooms_firmwareRange<02.18.00
OR
hpelite_slice_g2_with_zoom_rooms_firmwareRange<02.18.00
OR
hppro_mini_400_g9_desktop_pc_firmwareRange<02.13.02
OR
hppro_sff_400_g9_desktop_pc_firmwareRange<02.13.03
OR
hppro_tower_400_g9_desktop_pc_firmwareRange<02.13.03
OR
hppro_tower_480_g9_desktop_pc_firmwareRange<02.13.03
OR
hpprodesk_400_g3_desktop_mini_pc_firmwareRange<02.49
OR
hphp_prodesk_400_g4_desktop_mini_pcRange<02.27.00
OR
hphp_prodesk_400_g4_microtower_pcRange<02.49
OR
hphp_prodesk_400_g4_small_form_factor_pcRange<02.49
OR
hphp_prodesk_400_g5_desktop_mini_pcRange<02.20.00
OR
hphp_prodesk_400_g5_microtower_pcRange<02.27.00
OR
hphp_prodesk_400_g5_small_form_factor_pcRange<02.27.00
OR
hphp_prodesk_400_g6_desktop_mini_pcRange<02.18.00
OR
hphp_prodesk_400_g6_microtower_pcRange<02.20.00
OR
hphp_prodesk_400_g6_small_form_factor_pcRange<02.20.00
OR
hphp_prodesk_400_g7_microtower_pcRange<02.18.00
OR
hphp_prodesk_400_g7_small_form_factor_pcRange<02.18.00
OR
hphp_prodesk_480_g4_microtower_pcRange<02.49
OR
hphp_prodesk_480_g5_microtower_pcRange<02.27.00
OR
hphp_prodesk_480_g6_microtower_pcRange<02.20.00
OR
hphp_prodesk_480_g7_pci_microtower_pcRange<02.18.00
OR
hpprodesk_600_g3_desktop_mini_pc_firmwareRange<02.49
OR
hpprodesk_600_g3_microtower_pc_firmwareRange<02.49
OR
hpprodesk_600_g3_small_form_factor_pc_firmwareRange<02.49
OR
hphp_prodesk_600_g4_desktop_mini_pcRange<02.27.00
OR
hphp_prodesk_600_g4_microtower_pcRange<02.27.00
OR
hphp_prodesk_600_g4_microtower_pc_\(with_pci_slot\)Range<02.27.00
OR
hphp_prodesk_600_g4_small_form_factor_pcRange<02.27.00
OR
hphp_prodesk_600_g5_desktop_mini_pcRange<02.20.00
OR
hphp_prodesk_600_g5_microtower_pcRange<02.20.00
OR
hphp_prodesk_600_g5_microtower_pc_\(with_pci_slot\)Range<02.20.00
OR
hphp_prodesk_600_g5_small_form_factor_pcRange<02.20.00
OR
hphp_prodesk_600_g6_desktop_mini_pcRange<02.18.00
OR
hphp_prodesk_600_g6_microtower_pcRange<02.18.00
OR
hphp_prodesk_600_g6_pci_microtower_pcRange<02.18.00
OR
hphp_prodesk_600_g6_small_form_factor_pcRange<02.18.00
OR
hpprodesk_680_g3_microtower_pc_firmwareRange<02.49
OR
hphp_prodesk_680_g4_microtower_pcRange<02.27.00
OR
hphp_prodesk_680_g4_microtower_pc_\(with_pci_slot\)Range<02.27.00
OR
hphp_prodesk_680_g6_pci_microtower_pcRange<02.18.00
OR
hpproone_400_g3_20-inch_non-touch_all-in-one_pc_firmwareRange<02.49
OR
hpproone_400_g3_20-inch_touch_all-in-one_pc_firmwareRange<02.49
OR
hphp_proone_400_g4_20-inch_non-touch_all-in-oneRange<02.27.00
OR
hpproone_400_g4_23.8-inch_non-touch_all-in-one_business_pc_firmwareRange<02.27.00
OR
hpproone_400_g5_20-inch_all-in-one_business_pc_firmwareRange<02.20.00
OR
hphp_proone_400_g5_23.8-inch_all-in-oneRange<02.20.00
OR
hphp_proone_400_g6_20_all-in-one_pcRange<02.18.01
OR
hphp_proone_400_g6_24_all-in-one_pcRange<02.18.01
OR
hpproone_440_23.8_inch_g9_all-in-one_desktop_pc_firmwareRange<02.13.01
OR
hphp_proone_440_g4_23.8-inch_non-touch_all-in-oneRange<02.27.00
OR
hpproone_440_g5_23.8-in_all-in-one_business_pc_firmwareRange<02.20.00
OR
hphp_proone_440_g6_24_all-in-one_pcRange<02.18.01
OR
hpproone_480_g3_20-inch_non-touch_all-in_one_pc_firmwareRange<02.49
OR
hpproone_600_g4_21.5-inch_touch_all-in-one_business_pc_firmwareRange<02.27.00
OR
hphp_proone_600_g5_21.5-in_all-in-oneRange<02.20.00
OR
hphp_proone_600_g6_22_all-in-one_pcRange<02.18.01
OR
hphp_z1_entry_tower_g5Range<02.20.00
OR
hphp_z1_entry_tower_g6Range<02.18.00
OR
hphp_z1_g8_tower_desktop_pcRange<02.15.00
OR
hpz1_g9_tower_desktop_pc_firmwareRange<02.13.03
OR
hpzhan_66_pro_g3_22_all-in-one_pc_firmwareRange<02.18.01
OR
hpzhan_66_pro_g3_24_all-in-one_pc_firmwareRange<02.18.01
OR
hpzhan_99_pro_23.8_inch_g9_all-in-one_firmwareRange<02.13.01
OR
hphp_engage_flex_mini_retail_systemRange<02.18.00
OR
hphp_engage_flex_pro_retail_systemRange<02.27.00
OR
hpengage_flex_pro-c_retail_system_firmwareRange<02.27.00
OR
hphp_engage_go_13.5_inch_mobile_systemRange<01.16.00
OR
hphp_engage_go_mobile_systemRange<01.27.00
OR
hphp_engage_one_all-in-one_systemRange<02.49
OR
hphp_engage_one_pro_aio_systemRange<02.18.01
OR
hphp_mp9_g4_retail_systemRange<02.27.00
OR
hphp_z2_mini_g5_workstationRange<01.04.16
OR
hphp_z2_mini_g5_workstationRange<01.04.16
OR
hpz2_mini_g9_workstation_firmwareRange<03.01.03
OR
hpz2_mini_g9_workstation_firmwareRange<03.01.03
OR
hphp_z2_small_form_factor_g5_workstationRange<01.04.16
OR
hphp_z2_small_form_factor_g5_workstationRange<01.04.16
OR
hphp_z2_small_form_factor_g8_workstationRange<01.06.07
OR
hphp_z2_small_form_factor_g8_workstationRange<01.06.07
OR
hpz2_small_form_factor_g9_workstation_firmwareRange<03.01.03
OR
hpz2_small_form_factor_g9_workstation_firmwareRange<03.01.03
OR
hphp_z2_tower_g5_workstationRange<01.04.16
OR
hphp_z2_tower_g5_workstationRange<01.04.16
OR
hphp_z2_tower_g8_workstationRange<01.06.07
OR
hphp_z2_tower_g8_workstationRange<01.06.07
OR
hpz2_tower_g9_workstation_firmwareRange<03.01.03
OR
hpz2_tower_g9_workstation_firmwareRange<03.01.03
OR
hpmt21_mobile_thin_client_firmwareRange<01.27.00
OR
hpmt22_mobile_thin_client_firmwareRange<01.20.00
OR
hpmt31_mobile_thin_client_firmwareRange<01.27.00

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

AI Score

7.6

Confidence

Low

EPSS

0

Percentile

9.0%

Related for HPSBHF03936