CVE-2021-3808 | Severity.io

Description

Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.

Related CPE's

elite_dragonfly_firmware

Vulnerable

elite_dragonfly

elite_x2_1012_g2_firmware

Vulnerable

elite_x2_1012_g2

elite_x2_1013_g3_firmware

Vulnerable

elite_x2_1013_g3

elite_x2_g4_firmware

Vulnerable

elitebook_1040_g4_firmware

Vulnerable

elitebook_1040_g4

elitebook_1050_g1_firmware

Vulnerable

elitebook_1050_g1

elitebook_725_g4_firmware

Vulnerable

elitebook_725_g4

elitebook_735_g5_firmware

Vulnerable

elitebook_735_g5

elitebook_735_g6_firmware

Vulnerable

elitebook_735_g6

elitebook_745_g4_firmware

Vulnerable

elitebook_745_g4

elitebook_745_g5_firmware

Vulnerable

elitebook_745_g5

elitebook_745_g6_firmware

Vulnerable

elitebook_745_g6

elitebook_755_g4_firmware

Vulnerable

elitebook_755_g4

elitebook_755_g5_firmware

Vulnerable

elitebook_755_g5

elitebook_820_g4_firmware

Vulnerable

elitebook_820_g4

elitebook_828_g4_firmware

Vulnerable

elitebook_828_g4

elitebook_830_g5_firmware

Vulnerable

elitebook_830_g5

elitebook_830_g6_firmware

Vulnerable

elitebook_830_g6

elitebook_836_g5_firmware

Vulnerable

elitebook_836_g5

elitebook_836_g6_firmware

Vulnerable

elitebook_836_g6

elitebook_840_g4_firmware

Vulnerable

elitebook_840_g4

elitebook_840_g5_firmware

Vulnerable

elitebook_840_g5

elitebook_840_g6_firmware

Vulnerable

elitebook_840_g6

elitebook_840r_g4_firmware

Vulnerable

elitebook_840r_g4

elitebook_846_g5_firmware

Vulnerable

elitebook_846_g5

elitebook_848_g4_firmware

Vulnerable

elitebook_848_g4

elitebook_850_g4_firmware

Vulnerable

elitebook_850_g4

elitebook_850_g5_firmware

Vulnerable

elitebook_850_g5

elitebook_850_g6_firmware

Vulnerable

elitebook_850_g6

elitebook_x360_1020_g2_firmware

Vulnerable

elitebook_x360_1020_g2

elitebook_x360_1030_g2_firmware

Vulnerable

elitebook_x360_1030_g2

elitebook_x360_1030_g3_firmware

Vulnerable

elitebook_x360_1030_g3

elitebook_x360_1030_g4_firmware

Vulnerable

elitebook_x360_1030_g4

elitebook_x360_1040_g5_firmware

Vulnerable

elitebook_x360_1040_g5

elitebook_x360_1040_g6_firmware

Vulnerable

elitebook_x360_1040_g6

elitebook_x360_830_g5_firmware

Vulnerable

elitebook_x360_830_g5

elitebook_x360_830_g6_firmware

Vulnerable

elitebook_x360_830_g6

pro_x2_612_g2_firmware

Vulnerable

probook_11_ee_g2_firmware

Vulnerable

probook_11_ee_g2

probook_430_g4_firmware

Vulnerable

probook_430_g5_firmware

Vulnerable

probook_430_g6_firmware

Vulnerable

probook_440_g4_firmware

Vulnerable

probook_440_g5_firmware

Vulnerable

probook_440_g6_firmware

Vulnerable

probook_445_g6_firmware

Vulnerable

probook_445r_g6_firmware

Vulnerable

probook_445r_g6

probook_450_g4_firmware

Vulnerable

probook_450_g5_firmware

Vulnerable

probook_450_g6_firmware

Vulnerable

probook_455_g4_firmware

Vulnerable

probook_455_g5_firmware

Vulnerable

probook_455_g6_firmware

Vulnerable

probook_455r_g6_firmware

Vulnerable

probook_455r_g6

probook_470_g4_firmware

Vulnerable

probook_470_g5_firmware

Vulnerable

probook_640_g3_firmware

Vulnerable

probook_640_g4_firmware

Vulnerable

probook_640_g5_firmware

Vulnerable

probook_645_g3_firmware

Vulnerable

probook_645_g4_firmware

Vulnerable

probook_650_g3_firmware

Vulnerable

probook_650_g4_firmware

Vulnerable

probook_650_g5_firmware

Vulnerable

probook_655_g3_firmware

Vulnerable

probook_x360_11_g2_ee_firmware

Vulnerable

probook_x360_11_g2_ee

probook_x360_11_g3_ee_firmware

Vulnerable

probook_x360_11_g3_ee

probook_x360_11_g4_ee_firmware

Vulnerable

probook_x360_11_g4_ee

probook_x360_440_g1_firmware

Vulnerable

probook_x360_440_g1

zbook_14u_g4_firmware

Vulnerable

zbook_14u_g5_firmware

Vulnerable

zbook_14u_g6_firmware

Vulnerable

zbook_15_g4_firmware

Vulnerable

zbook_15_g5_firmware

Vulnerable

zbook_15_g6_firmware

Vulnerable

zbook_15u_g4_firmware

Vulnerable

zbook_15u_g5_firmware

Vulnerable

zbook_15u_g6_firmware

Vulnerable

zbook_17_g4_firmware

Vulnerable

zbook_17_g5_firmware

Vulnerable

zbook_17_g6_firmware

Vulnerable

zbook_studio_g4_firmware

Vulnerable

zbook_studio_g4

zbook_studio_g5_firmware

Vulnerable

zbook_studio_g5

zbook_studio_x360_g5_firmware

Vulnerable

zbook_studio_x360_g5

zbook_x2_g4_firmware

Vulnerable

zhan_66_pro_13_g2_firmware

Vulnerable

zhan_66_pro_13_g2

zhan_66_pro_14_g2_firmware

Vulnerable

zhan_66_pro_14_g2

zhan_66_pro_15_g2_firmware

Vulnerable

zhan_66_pro_15_g2

zhan_66_pro_g1_firmware

Vulnerable

zhan_x_13_g2_firmware

Vulnerable

o

hp

hp_z1_all-in-one_g3_firmware

2

h

hp

hp_z1_all-in-one_g3

2

hp_z1_entry_tower_g5_firmware

Vulnerable

hp_z1_entry_tower_g5

o

hp

hp_z2_mini_g3_firmware

2

h

hp

hp_z2_mini_g3

2

o

hp

hp_z2_mini_g4_firmware

2

h

hp

hp_z2_mini_g4

2

o

hp

hp_z2_mini_g5_firmware

2

h

hp

hp_z2_mini_g5

2

o

hp

hp_z2_small_form_factor_g4_firmware

2

h

hp

hp_z2_small_form_factor_g4

2

o

hp

hp_z2_small_form_factor_g5_firmware

2

h

hp

hp_z2_small_form_factor_g5

2

o

hp

hp_z2_tower_g4_firmware

2

h

hp

hp_z2_tower_g4

2

o

hp

hp_z2_tower_g5_firmware

2

h

hp

hp_z2_tower_g5

2

o

hp

hp_z238_microtower_firmware

2

h

hp

hp_z238_microtower

2

o

hp

hp_z240_small_form_factor_firmware

2

h

hp

hp_z240_small_form_factor

2

o

hp

hp_z240_tower_firmware

2

h

hp

hp_z240_tower

2

hp_mt21_mobile_thin_client_firmware

Vulnerable

hp_mt21_mobile_thin_client

hp_mt31_mobile_thin_client_firmware

Vulnerable

hp_mt31_mobile_thin_client

hp_mt44_mobile_thin_client_firmware

Vulnerable

hp_mt44_mobile_thin_client

hp_mt45_mobile_thin_client_firmware

Vulnerable

hp_mt45_mobile_thin_client

elite_slice_firmware

Vulnerable

elite_slice_g2_firmware

Vulnerable

elitedesk_705_g3_desktop_mini_pc_firmware

Vulnerable

elitedesk_705_g3_desktop_mini_pc

elitedesk_705_g3_microtower_pc_firmware

Vulnerable

elitedesk_705_g3_microtower_pc

elitedesk_705_g3_small_form_factor_pc_firmware

Vulnerable

elitedesk_705_g3_small_form_factor_pc

elitedesk_705_g4_desktop_mini_pc_firmware

Vulnerable

elitedesk_705_g4_desktop_mini_pc

elitedesk_705_g4_microtower_pc_firmware

Vulnerable

elitedesk_705_g4_microtower_pc

elitedesk_705_g4_small_form_factor_pc_firmware

Vulnerable

elitedesk_705_g4_small_form_factor_pc

elitedesk_705_g4_workstation_firmware

Vulnerable

elitedesk_705_g4_workstation

elitedesk_705_g5_desktop_mini_pc_firmware

Vulnerable

elitedesk_705_g5_desktop_mini_pc

elitedesk_705_g5_small_form_factor_pc_firmware

Vulnerable

elitedesk_705_g5_small_form_factor_pc

elitedesk_800_35w_g3_desktop_mini_pc_firmware

Vulnerable

elitedesk_800_35w_g3_desktop_mini_pc

elitedesk_800_35w_g4_desktop_mini_pc_firmware

Vulnerable

elitedesk_800_35w_g4_desktop_mini_pc

elitedesk_800_65w_g3_desktop_mini_pc_firmware

Vulnerable

elitedesk_800_65w_g3_desktop_mini_pc

elitedesk_800_65w_g4_desktop_mini_pc_firmware

Vulnerable

elitedesk_800_65w_g4_desktop_mini_pc

elitedesk_800_95w_g4_desktop_mini_pc_firmware

Vulnerable

elitedesk_800_95w_g4_desktop_mini_pc

elitedesk_800_g3_small_form_factor_pc_firmware

Vulnerable

elitedesk_800_g3_small_form_factor_pc

elitedesk_800_g3_tower_pc_firmware

Vulnerable

elitedesk_800_g3_tower_pc

elitedesk_800_g4_small_form_factor_pc_firmware

Vulnerable

elitedesk_800_g4_small_form_factor_pc

elitedesk_800_g4_tower_pc_firmware

Vulnerable

elitedesk_800_g4_tower_pc

elitedesk_800_g4_workstation_firmware

Vulnerable

elitedesk_800_g4_workstation

elitedesk_800_g5_desktop_mini_pc_firmware

Vulnerable

elitedesk_800_g5_desktop_mini_pc

elitedesk_800_g5_small_form_factor_pc_firmware

Vulnerable

elitedesk_800_g5_small_form_factor_pc

elitedesk_800_g5_tower_pc_firmware

Vulnerable

elitedesk_800_g5_tower_pc

elitedesk_880_g3_tower_pc_firmware

Vulnerable

elitedesk_880_g3_tower_pc

elitedesk_880_g4_tower_pc_firmware

Vulnerable

elitedesk_880_g4_tower_pc

elitedesk_880_g5_tower_pc_firmware

Vulnerable

elitedesk_880_g5_tower_pc

eliteone_1000_g1_23.8-in_all-in-one_business_pc_firmware

Vulnerable

eliteone_1000_g1_23.8-in_all-in-one_business_pc

eliteone_1000_g2_23.8-in_all-in-one_business_pc_firmware

Vulnerable

eliteone_1000_g2_23.8-in_all-in-one_business_pc

eliteone_800_g3_23.8_non-touch_all-in-one_business_pc_firmware

Vulnerable

eliteone_800_g3_23.8_non-touch_all-in-one_business_pc

eliteone_800_g4_23.8-in_all-in-one_business_pc_firmware

Vulnerable

eliteone_800_g4_23.8-in_all-in-one_business_pc

eliteone_800_g5_23.8-in_all-in-one_firmware

Vulnerable

eliteone_800_g5_23.8-in_all-in-one

prodesk_400_g3_desktop_mini_pc_firmware

Vulnerable

prodesk_400_g3_desktop_mini_pc

prodesk_400_g4_desktop_mini_pc_firmware

Vulnerable

prodesk_400_g4_desktop_mini_pc

prodesk_400_g4_microtower_pc_firmware

Vulnerable

prodesk_400_g4_microtower_pc

prodesk_400_g4_small_form_factor_pc_firmware

Vulnerable

prodesk_400_g4_small_form_factor_pc

prodesk_400_g5_desktop_mini_pc_firmware

Vulnerable

prodesk_400_g5_desktop_mini_pc

prodesk_400_g5_microtower_pc_firmware

Vulnerable

prodesk_400_g5_microtower_pc

prodesk_400_g5_small_form_factor_pc_firmware

Vulnerable

prodesk_400_g5_small_form_factor_pc

prodesk_400_g6_microtower_pc_firmware

Vulnerable

prodesk_400_g6_microtower_pc

prodesk_400_g6_small_form_factor_pc_firmware

Vulnerable

prodesk_400_g6_small_form_factor_pc

prodesk_405_g4_desktop_mini_pc_firmware

Vulnerable

prodesk_405_g4_desktop_mini_pc

prodesk_405_g4_small_form_factor_pc_firmware

Vulnerable

prodesk_405_g4_small_form_factor_pc

prodesk_480_g4_microtower_pc_firmware

Vulnerable

prodesk_480_g4_microtower_pc

prodesk_480_g5_microtower_pc_firmware

Vulnerable

prodesk_480_g5_microtower_pc

prodesk_480_g6_microtower_pc_firmware

Vulnerable

prodesk_480_g6_microtower_pc

prodesk_600_g3_desktop_mini_pc_firmware

Vulnerable

prodesk_600_g3_desktop_mini_pc

prodesk_600_g3_microtower_pc_firmware

Vulnerable

prodesk_600_g3_microtower_pc

prodesk_600_g3_small_form_factor_pc_firmware

Vulnerable

prodesk_600_g3_small_form_factor_pc

prodesk_600_g4_desktop_mini_pc_firmware

Vulnerable

prodesk_600_g4_desktop_mini_pc

prodesk_600_g4_microtower_pc_firmware

Vulnerable

prodesk_600_g4_microtower_pc

prodesk_600_g4_small_form_factor_pc_firmware

Vulnerable

prodesk_600_g4_small_form_factor_pc

prodesk_600_g5_desktop_mini_pc_firmware

Vulnerable

prodesk_600_g5_desktop_mini_pc

prodesk_600_g5_microtower_pc_firmware

Vulnerable

prodesk_600_g5_microtower_pc

prodesk_600_g5_small_form_factor_pc_firmware

Vulnerable

prodesk_600_g5_small_form_factor_pc

prodesk_680_g3_microtower_pc_firmware

Vulnerable

prodesk_680_g3_microtower_pc

prodesk_680_g4_microtower_pc_firmware

Vulnerable

prodesk_680_g4_microtower_pc

proone_400_g3_20-inch_non-touch_all-in-one_pc_firmware

Vulnerable

proone_400_g3_20-inch_non-touch_all-in-one_pc

proone_400_g3_20-inch_touch_all-in-one_pc_firmware

Vulnerable

proone_400_g3_20-inch_touch_all-in-one_pc

proone_400_g4_20-inch_non-touch_all-in-one_business_pc_firmware

Vulnerable

proone_400_g4_20-inch_non-touch_all-in-one_business_pc

proone_400_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware

Vulnerable

proone_400_g4_23.8-inch_non-touch_all-in-one_business_pc

proone_400_g5_20-inch_all-in-one_business_pc_firmware

Vulnerable

proone_400_g5_20-inch_all-in-one_business_pc

proone_400_g5_23.8-inch_all-in-one_business_pc_firmware

Vulnerable

proone_400_g5_23.8-inch_all-in-one_business_pc

proone_440_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware

Vulnerable

proone_440_g4_23.8-inch_non-touch_all-in-one_business_pc

proone_440_g5_23.8-in_all-in-one_business_pc_firmware

Vulnerable

proone_440_g5_23.8-in_all-in-one_business_pc

proone_480_g3_20-inch_non-touch_all-in_one_pc_firmware

Vulnerable

proone_480_g3_20-inch_non-touch_all-in_one_pc

proone_600_g3_21.5-inch_non-touch_all-in-one_pc_firmware

Vulnerable

proone_600_g3_21.5-inch_non-touch_all-in-one_pc

proone_600_g4_21.5-inch_touch_all-in-one_business_pc_firmware

Vulnerable

proone_600_g4_21.5-inch_touch_all-in-one_business_pc

proone_600_g5_21.5-in_all-in-one_business_pc_firmware

Vulnerable

proone_600_g5_21.5-in_all-in-one_business_pc

engage_flex_pro_retail_system_firmware

Vulnerable

engage_flex_pro_retail_system

engage_flex_pro-c_retail_system_firmware

Vulnerable

engage_flex_pro-c_retail_system

engage_go_10_mobile_system_firmware

Vulnerable

engage_go_10_mobile_system

engage_go_mobile_system_firmware

Vulnerable

engage_go_mobile_system

engage_one_aio_system_firmware

Vulnerable

engage_one_aio_system

o

hp

mp9_g4_retail_system_firmware

2

h

hp

mp9_g4_retail_system

2

References

https://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788

Vendor Advisory

https://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788

Vendor Advisory

Weaknesses

[email protected]

Primary

NVD-CWE-noinfo

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-269

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-02-01T06:15:09.147Z

3 years ago

Last modified

2025-03-27T18:15:43.113Z

1 year ago