Lucene search

HP Product Security Response TeamHPSBHF03946

HistoryJun 18, 2024 - 12:00 a.m.

Insyde BIOS June 2024 EDK II Reference Vulnerabilities

2024-06-1800:00:00

HP Product Security Response Team

support.hp.com

insyde bios

edk ii

potential vulnerabilities

hp pc products

arbitrary code execution

software updates

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Potential EDK II reference code vulnerabilities have been identified in certain HP PC products using Insyde BIOS (Insyde H20 UEFI Firmware), which might allow arbitrary code execution. Inysde has released updates to mitigate the potential vulnerabilities.

Insyde has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.

Affected configurations

Vulners

Node

hphp_348_g4Range<F.70

hphp_probook_x360_11_g1_eeRange<01.40

hphp_240_g6_pcRange<F.57

hphp_240_g7_pcRange<F.77

hphp_240_g6_pcRange<F.09

hpdata_protector_notebook_extensionRange<F.01

hphp_245_pcRange<F.13

hphp_245_g10Range<F.09

hphp_246_g6_pcRange<F.57

hphp_246_g7_pcRange<F.77

hphp_250_g6_pcRange<F.75

hphp_250_g7Range<F.48

hphp_250_g6_pcRange<F.66

hphp_255_g7Range<F.43

hphp_255_g8_pcRange<F.39

hphp_255_g8_pcRange<F.15

hphp_256_g6_pcRange<F.75

hphp_256_g7Range<F.48

hphp_258_g6_pcRange<F.75

hphp_258_g7Range<F.48

hphp_340_g7Range<F.41

hphp_348_g7Range<F.41

hphp_470_g7Range<F.72

hphp_470_g10_pcRange<F.07

hphp_probook_635_aero_g8Range<F.03

hphp_stream_11_pro_g5Range<F.20

hphp_14_inch_laptop_pc_14-ep1xxxRange<F.04

hphp_14_inch_laptop_pc_14-ep1xxxRange<F.06

hphp_14_inch_laptop_pc_14-ep1xxxRange<F.08

hphp_14-cf2xxx\,_14t-cf200Range<F.25

hphp_14-em0xxx\,_14z-em000Range<F.09

hphp_14-ep1xxx\,_14t-ep100Range<F.04

hphp_14-hr0xxxRange<F.09

hphp_14-gr1xxRange<F.04

hphp_14s-cf2xxxRange<F.25

hphp_14s-cr2xxxRange<F.25

hphp_15-da0xxx\,_15t-da000Range<F.48

hphp_15-da1xxx\,_15t-da100Range<F.48

hphp_15-da2xxx\,_15t-da200Range<F.48

hphp_15-da3xxx\,_15t-da300Range<F.48

hphp_15-db00xx\,_15t-db000Range<F.43

hphp_15-db1xxx\,_15z-db100Range<F.43

hphp_15-dw0xxx\,_15t-dw000Range<F.66

hphp_15-dw1xxx\,_15t-dw100Range<F.66

hphp_15-dw2xxx\,_15t-dw200Range<F.66

hphp_15-dw3xxx\,_15t-dw300Range<F.66

hphp_15-dw4xxx\,_15t-dw400Range<F.66

hphp_15g-dr0xxxRange<F.48

hphp_15g-dr1xxxRange<F.48

hphp_15g-dx0xxxRange<F.43

hphp_15-gw0xxx\,_15z-gw000Range<F.39

hphp_15q-ds0xxxRange<F.48

hphp_15q-ds1xxxRange<F.48

hphp_15q-dy0xxxRange<F.43

hphp_15s-dr0xxxRange<F.66

hphp_15s-dr1xxxRange<F.66

hphp_15s-dr2xxxRange<F.66

hphp_15s-dr3xxxRange<F.66

hphp_15s-dr4xxx\,_15s-du4xxx\,_15s-dy4xxxRange<F.66

hphp_15s-du0xxxRange<F.66

hphp_15s-du1xxxRange<F.66

hphp_15s-du2xxxRange<F.66

hphp_15s-du3xxxRange<F.66

hphp_15s-dy0xxxRange<F.66

hphp_15s-dy2xxxRange<F.66

hphp_15s-dy3xxxRange<F.66

hphp_15s-gr0xxxRange<F.39

hphp_15s-gu0xxxRange<F.39

hphp_15s-gy0xxxRange<F.39

hphp_17-by0xxxRange<F.72

hphp_17-by2xxx\,_17t-by200Range<F.25

hphp_17-c3000\,_17-cn3xxx\,_17t-cn300Range<F.07

hphp_17-c4000\,_17-cn4xxx\,_17t-cn400Range<F.05

hphp_17-cp1xxx\,_17z-cp100Range<F.13

hphp_17-cp2xxxRange<F.16

hphp_17-cp3xxxRange<F.06

hphp_17g-cr0xxxRange<F.72

hphp_17g-cr2xxxRange<F.25

hphp_17s_laptop_17s-cu3xxx\,_17s-cr3xxx\,_17s-cy3xxxRange<F.07

hphp_17s_laptop_17s-cr4xxxRange<F.05

hphp_envy_13-aq1xxx\,_13t-aq100Range<F.23

hphp_envy_13-ba0xxx\,_13t-ba000Range<F.30

hphp_envy_13-ba1xxx\,_13t-ba100Range<F.40

hphp_envy_13m-ba0xxxRange<F.30

hphp_envy_13m-ba1xxxRange<F.40

hphp_envy_14-eb0xxx\,_14t-eb000Range<F.45

hphp_envy_14-eb1xxx\,_14t-eb100Range<F.35

hphp_envy_16-h0xxx\,_16t-h000Range<F.40

hphp_envy_16-h1xxxRange<F.20

hphp_envy_17-ce1xxx\,_17t-ce100Range<F.17

hphp_envy_17-ce2xxx\,_17t-ce200Range<F.15

hphp_envy_17-cg0xxx\,_17t-cg000Range<F.30

hphp_envy_17-cg1xxx\,_17t-cg100Range<F.40

hphp_envy_17-ch0xxx\,_17t-ch000Range<F.18

hphp_envy_17-ch1xxx\,_17t-ch100Range<F.14

hphp_envy_17-ch2xxxRange<F.17

hphp_envy_17-cr0xxx\,_17t-cr000Range<F.31

hphp_envy_17-cr1xxx\,_17t-cr100Range<F.20

hphp_envy_17.3_inch_laptop_pc_17-cw0xxxRange<F.07

hphp_envy_17.3_inch_laptop_pc_17-cw1xxxRange<F.01

hphp_envy_17.3_inch_laptop_pc_17-da0xxx\,_17t-da000Range<F.02

hphp_envy_17m-ce1xxxRange<F.17

hphp_envy_17m-cg0xxxRange<F.30

hphp_envy_17m-cg1xxxRange<F.40

hphp_envy_17m-ch0xxxRange<F.18

hphp_envy_17m-ch1xxxRange<F.14

hphp_envy_x360_13-ay0xxx\,_13z-ay000Range<F.26

hphp_envy_x360_13-ay1xxx\,_13z-ay100Range<F.10

hphp_envy_x360_13-bd0xxx\,_13t-bd00Range<F.41

hphp_envy_x360_13-bd1xxx\,_13t-bd100Range<F.18

hphp_envy_x360_13-bf0xxx\,_13t-bf000Range<F.30

hphp_envy_x360_13m-bd0xxxRange<F.41

hphp_envy_x360_13m-bd1xxxRange<F.18

hphp_envy_x360_14-es0xxx\,_14t-es000Range<F.09

hphp_envy_x360_14-es1xxx\,_14t-es100Range<F.04

hphp_envy_x360_14_inch_2-in-1_laptop_pc_14-fa0xxxRange<F.02

hphp_envy_x360_14_inch_2-in-1_laptop_pc_14-fc0xxxRange<F.01

hphp_envy_x360_15-dr1xxx\,_15t-dr100Range<F.19

hphp_envy_x360_15-ed0xxx\,_15t-ed000Range<F.30

hphp_envy_x360_15-ed1xxx\,_15t-ed100Range<F.41

hphp_envy_x360_15-ee0xxx\,_15z-ee000Range<F.26

hphp_envy_x360_15-ee1xxx\,_15z-ee100Range<F.13

hphp_envy_x360_15-es0xxx\,_15t-es000Range<F.18

hphp_envy_x360_15-es1xxx\,_15t-es100Range<F.14

hphp_envy_x360_15-es2xxxRange<F.17

hphp_envy_x360_15-ew0xxx\,_15t-ew000Range<F.40

hphp_envy_x360_15-ew1xxx\,_15t-ew100Range<F.20

hphp_envy_x360_15-ey0xxx\,_15t-ey000Range<F.16

hphp_envy_x360_15-ey1xxx\,_15t-ey100Range<F.07

hphp_envy_x360_15-fe0xxxRange<F.06

hphp_envy_x360_15-fe1xxxRange<F.03

hphp_envy_x360_15-fh0xxxRange<F.08

hphp_envy_x360_15m-dr1xxxRange<F.19

hphp_envy_x360_15m-ed0xxxRange<F.30

hphp_envy_x360_15m-ed1xxxRange<F.41

hphp_envy_x360_15m-ee0xxxRange<F.26

hphp_envy_x360_15m-es0xxxRange<F.18

hphp_envy_x360_15m-es1xxxRange<F.14

hphp_envy_x360_16-ac0xxxRange<F.01

hphp_envy_x360_16-ad0xxxRange<F.04

hphp_pavilion_13-bb0xxx\,_13t-bb000Range<F.46

hphp_pavilion_13-bb1xxx\,_13t-bb100Range<F.25

hphp_pavilion_14-dv0xxx\,_14t-dv000Range<F.46

hphp_pavilion_14-dv1xxx\,_14t-dv100Range<F.25

hphp_pavilion_15-cs3xxx\,_15t-cs300Range<F.22

hphp_pavilion_15-eg0xxx\,_15t-eg000Range<F.46

hphp_pavilion_15-eg1xxx\,_15t-eg100Range<F.25

hphp_pavilion_16-af0000Range<F.05

hphp_pavilion_16-ag0xxx\,_16z-ag000Range<F.03

hphp_pavilion_aero_13-be2xxxRange<F.20

hphp_pavilion_aero_13-bg0000Range<F.03

hphp_14-dk0xxx\,_14z-dk000Range<F.66

hphp_14-dk1xxx\,_14z-dk100Range<F.47

hphp_pavilion_15-cs0xxx\,_15t-cs000Range<F.25

hphp_pavilion_x360_14-cd1xxx\,_14t-cd100Range<F.47

hphp_pavilion_x360_14-cd2xxx\,_14t-cd200Range<F.25

hphp_pavilion_plus_14-eh0xxx\,_14t-eh000Range<F.12

hphp_pavilion_plus_14-eh1xxx\,_14t-eh100Range<F.10

hphp_pavilion_plus_14-ew0xxx\,_14t-ew000Range<F.04

hphp_pavilion_plus_14-ew1xxx\,_14t-ew100Range<F.08

hphp_pavilion_plus_14-ey0xxx\,_14z-ey000Range<F.06

hphp_pavilion_plus_14-ey1xxx\,_14z-ey100Range<F.03

hphp_pavilion_plus_16-ab0xxx\,_16t-ab000Range<F.06

hphp_pavilion_plus_16-ab1xxx\,_16t-ab100Range<F.03

hphp_pavilion_x360_11-ap0xxx\,_11t-ap000Range<F.19

hphp_pavilion_x360_11m-ap0xxxRange<F.19

hphp_pavilion_x360_14-dh0xxx\,_14t-dh000Range<F.25

hphp_pavilion_x360_14-dh1xxx\,_14t-dh100Range<F.18

hphp_pavilion_x360_14-dh2xxx\,_14t-dh200Range<F.14

hphp_pavilion_x360_14-dw0xxx\,_14t-dw000Range<F.34

hphp_pavilion_x360_14-dy0xxx\,_14t-dy000Range<F.24

hphp_pavilion_x360_14-dy1xxx\,_14t-dy100Range<F.24

hphp_pavilion_x360_14-dy2xxx\,_14t-dy200Range<F.14

hphp_pavilion_x360_14_inch_2-in-1_laptop_pc_14-ek0xxx\,_14t-ek000Range<F.20

hphp_pavilion_x360_14_inch_2-in-1_laptop_pc_14-ek1xxx\,_14t-ek100Range<F.09

hphp_pavilion_x360_14_inch_2-in-1_laptop_pc_14-ek2xxx\,_14t-ek200Range<F.05

hphp_pavilion_x360_14m-dw0xxxRange<F.34

hphp_pavilion_x360_14m-dh0xxxRange<F.25

hphp_pavilion_x360_14m-dh1xxxRange<F.18

hphp_pavilion_x360_14m-dy0xxxRange<F.24

hphp_pavilion_x360_14m-dy1xxxRange<F.24

hphp_pavilion_x360_14q-dw0xxxRange<F.34

hphp_pavilion_x360_15-dq1xxx\,_15t-dq100Range<F.19

hphp_pavilion_x360_15-dq2xxx\,_15t-dq200Range<F.13

hphp_pavilion_x360_15-er0xxx\,_15t-er000Range<F.24

hphp_pavilion_x360_15-er1xxx\,_15t-er100Range<F.14

hphp_stream_11-ak0xxxRange<F.28

hphp_stream_14-ax1xxRange<F.28

hphp_stream_14-cb1xx_\(win10s\)Range<F.28

hphp_spectre_foldable_pc_17-cs0xxxRange<F.06

hphp_spectre_x360_14-ef0xxx\,_14t-ef000Range<F.26

hphp_spectre_x360_14-ef1xxxRange<F.26

hphp_spectre_x360_14-ef2xxxRange<F.05

hphp_spectre_x360_16-f0xxxRange<F.21

hphp_spectre_x360_16-f1xxx\,_16t-f100Range<F.19

hphp_spectre_x360_16-f2xxxRange<F.14

hphp_tablet_11-be0xxx\,_11t-be000Range<F.15

hphp_tablet_11m-be0xxxRange<F.15

hpomen_gaming_hubRange<F.20

hpomen_gaming_hubRange<F.10

hpomen_gaming_hubRange<F.20

hpomen_gaming_hubRange<F.22

hpomen_gaming_hubRange<F.10

hpvictus_by_hp_16-r0xxxRange<F.20

hpvictus_by_hp_16-d1xxx\,_16t-d100Range<F.10

hpvictus_by_hp_16-s0xxxRange<F.20

hpvictus_by_hp_16-d1xxx\,_16t-d100Range<F.05

CPENameOperatorVersion
hp 348 g4ltF.70
hp probook x360 11 g1 eelt01.40
hp 240 g6 notebook pcltF.57
hp 240 g7 notebook pcltF.77
hp 240 g9 notebook pcltF.09
hp 240r g9 notebook pcltF.01
hp 245 g9 notebook pcltF.13
hp 245 14 inch g10 notebook pcltF.09
hp 246 g6 notebook pcltF.57
hp 246 g7 notebook pcltF.77

Name	Operator	Version
hp 348 g4	lt	F.70
hp probook x360 11 g1 ee	lt	01.40
hp 240 g6 notebook pc	lt	F.57
hp 240 g7 notebook pc	lt	F.77
hp 240 g9 notebook pc	lt	F.09
hp 240r g9 notebook pc	lt	F.01
hp 245 g9 notebook pc	lt	F.13
hp 245 14 inch g10 notebook pc	lt	F.09
hp 246 g6 notebook pc	lt	F.57
hp 246 g7 notebook pc	lt	F.77