HP Bios vulnerability warning

Forums › Laptops and mobile computers › HP Bios vulnerability warning

PhantomNVD

2619 posts

Uber Geek
+1 received by user: 759
Inactive user

#201341 14-Aug-2016 21:17

Just been emailed for a bios update requirement for HP machines:

Products: HP ProBook Notebook PCs, HP Pavilion Notebook PCs, HP x2 PCs, HP EliteBook Notebook PCs, HP Mobile Thin Clients

Description: A security vulnerability identified with UEFI firmware, dubbed ThinkPwn, has been found in certain HP notebook PCs. This document describes how to fix this issue.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1611602 14-Aug-2016 21:50

All my HP laptops at home are updated and none are in the list... Thanks for linking.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

nathan

5695 posts

Uber Geek
+1 received by user: 1630
Inactive user

#1611665 15-Aug-2016 04:20

UEFI security vulns is certainly going to be an interesting attack vector for the next few years

clinty

1201 posts

Uber Geek
+1 received by user: 402

Lifetime subscriber

#1611709 15-Aug-2016 09:42

Looks like it is just affecting the AMD units

Clint

Behodar

11093 posts

Uber Geek
+1 received by user: 6070

Trusted

Lifetime subscriber

#1611724 15-Aug-2016 09:50

These sort of things make you wonder. Alarm bells went off in my head when I found that the HP machines at work can have BIOS settings changed from in Windows via VBScript. Meanwhile my Asus home machine doesn't like my Apple keyboard; it'll work for a couple of weeks then will suddenly decide that there is no keyboard present until you reset the CMOS. A keyboard shouldn't be able to do that!