HP Update
3342Warning Date
Severity Level
Warning Number
Target Sector
2 February, 2020
● High
2020-869
All
Description:
HP has released security update to address a vulnerability in the following products:
- HP EliteDesk 800 G5 DM
- HP EliteDesk 800 G5 SFF
- HP EliteDesk 800 G5 TWR
- HP EliteOne 800 G5 AIO
- HP ProDesk 400 G5 DM
- HP ProDesk 400 G6 MT
- HP ProDesk 400 G6 MT
- HP ProDesk 480 G6 MT
- HP ProDesk 600 G5 DM
- HP ProDesk 600 G5 MT
- HP ProDesk 600 G5 PCI MT
- HP ProDesk 600 G5 SFF
- HP ProOne 400 G5 AiO
- HP ProOne 440 G5 AiO
- HP ProOne 600 G5 AiO
- HP Elite Dragonfly
- HP Elite x2 G4
- HP EliteBook 830 G6
- HP EliteBook 836 G6
- HP EliteBook 840 G6
- HP EliteBook 840 G6 Healthcare Edition
- HP EliteBook 846 G6
- HP EliteBook 846 G6 Healthcare Edition
- HP EliteBook 850 G6
- HP EliteBook x360 1030 G4
- HP EliteBook x360 1040 G6
- HP EliteBook x360 830 G6
- HP ProBook 640 G5
- HP ProBook 650 G5
- HP ZBook 14u G6 Mobile Workstation
- HP ZBook 15 G6 Mobile Workstation
- HP ZBook 15u G6 Mobile Workstation
- HP ZBook 17 G6 Mobile Workstation
- HP ZHAN X 13 G2
Threats:
Attacker could exploit this vulnerability to access information and gain kernel privileges via the devices’ Direct Memory Access (DMA).
Best practice and Recommendations:
The CERT team encourages users to review HP security advisory and apply the necessary updates: