8.8
Advisory Published
Updated

CVE-2021-39298

First published: Wed Feb 16 2022(Updated: )

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

Credit: hp-security-alert@hp.com

Affected SoftwareAffected VersionHow to fix
HP Z1 Entry Tower G5 Firmware<02.12.00
HP Z1 Entry Tower G5 Workstation Firmware
HP Z1 Entry Tower G6<02.10.00
HP Z1 Entry Tower G6 Firmware
HP z1 G8 Tower Firmware<02.07.00
HP z1 G8 Tower Firmware
HP Z4 G4 Workstation (Core-X) Firmware<02.75
HP Z4 G4 Workstation (Core-X) Firmware<02.75
HP Z4 G4 Workstation (Core-X) Firmware<02.75
HP Z4 G4 Workstation (Core-X)
HP Z4 G4 Workstation Firmware<02.75
HP Z4 G4 Workstation Firmware<02.75
HP Z4 G4 Workstation (Xeon W) Firmware<02.75
HP Z4 G4 Workstation (Xeon W)
HP Z6 G4 Workstation Firmware<02.75
HP Z6 G4 Workstation Firmware<02.75
HP Z6 G4 Workstation Firmware<02.75
HP Z6 G4
hp z8 g4 workstation firmware<02.75
HP Z8 G4 Workstation Firmware<02.75
HP Z8 G4 Workstation Firmware<02.75
HP Z8 Workstation
HP Engage Flex Mini Retail System<02.10.00
HP Engage Flex Mini Retail System Firmware
HP MP9 G4 Retail System Firmware<02.18.00
HP mp9 g4 retail system firmware
HP Elite Dragonfly Firmware<01.12.00
HP Elite Dragonfly
HP Elite Dragonfly G2<01.08.00
HP Elite Dragonfly G2
HP Elite Dragonfly Max Firmware<01.08.00
HP Elite Dragonfly Max Firmware
HP Elite x2 1013 G3<01.19.00
HP Elite x2 1013 G3 Firmware
HP Elite x2 G4<01.12.00
HP Elite x2 G4 Firmware
HP Elite x2 G8 Firmware<01.08.00
HP Elite x2 G8
HP EliteBook 1050 G1 Firmware<01.19.00
HP EliteBook 1050 G1
HP EliteBook 830 G5 Firmware<01.19.00
HP EliteBook 830 G5 Firmware
HP EliteBook x360 830 G6 Firmware<01.12.00
HP EliteBook 830 G6 Firmware
HP EliteBook 830 G7<01.08.00
HP EliteBook 830 G7
HP EliteBook 830 G8<01.08.00
HP EliteBook 830 G8
HP EliteBook 836 G5<01.19.00
HP EliteBook 836 G5 Firmware
HP EliteBook 836 G6 Firmware<01.12.00
HP EliteBook 836 G6 Firmware
HP EliteBook 840 Aero G8 Firmware<01.08.00
HP EliteBook 840 Aero G8 Firmware
HP EliteBook 840 G5 Healthcare Edition Firmware<01.19.00
HP EliteBook 840 G5 Healthcare Edition
HP EliteBook 840 G5 Healthcare Edition<01.19.00
HP EliteBook 840 G5 Healthcare Edition Firmware
HP EliteBook 840 G6 Firmware<01.12.00
HP EliteBook 840 G6 Firmware
HP EliteBook 840 G6 Healthcare Edition Firmware<01.12.00
HP EliteBook 840 G6 Healthcare Edition Firmware
HP EliteBook 840 G7<01.08.00
HP EliteBook 840 G7
HP EliteBook 840 Aero G8 Firmware<01.08.00
HP EliteBook 840 G8 Firmware
HP EliteBook 840 G4 Firmware<01.19.00
HP EliteBook 840 G4
HP EliteBook 846 G5<01.19.00
HP EliteBook 846 G5 Healthcare Edition
HP EliteBook 850 G5 Firmware<01.19.00
HP EliteBook 850 G5 Firmware
HP EliteBook 850 G6 Firmware<01.12.00
HP EliteBook 850 G6 Firmware
HP EliteBook 850 G7<01.08.00
HP EliteBook 850 G7
HP EliteBook 850 G8 Firmware<01.08.00
HP EliteBook 850 G8
HP EliteBook x360 1030 G3 Firmware<01.19.00
HP EliteBook x360 1030 G3 Firmware
HP EliteBook x360 1030 G4<01.12.00
HP EliteBook x360 1030 G4 Firmware
HP EliteBook x360 1030 G7<01.08.00
HP EliteBook x360 1030 G7 Firmware
HP EliteBook x360 1030 G8 Firmware<01.08.00
HP EliteBook x360 1030 G8 Firmware
HP EliteBook x360 1040 G5<01.19.00
HP EliteBook x360 1040 G5 Firmware
HP EliteBook x360 1040 G6<01.12.00
HP EliteBook x360 1040 G6
HP EliteBook x360 1040 G7<01.08.00
HP EliteBook x360 1040 G7 Firmware
HP EliteBook x360 1040 G8 Firmware<01.08.00
HP EliteBook x360 1040 G8 Firmware
HP EliteBook x360 830 G5 Firmware<01.19.00
HP EliteBook x360 830 G5 Firmware
HP EliteBook x360 830 G6 Firmware<01.12.00
HP EliteBook x360 830 G6 Firmware
HP EliteBook x360 830 G7<01.08.00
HP EliteBook x360 830 G7 Firmware
HP EliteBook x360 830 G8 Firmware<01.08.00
HP EliteBook x360 830 G8 Firmware
HP ProBook 430 G5 Firmware<01.19.00
HP ProBook 430 G5 Firmware
HP ProBook 430 G6<01.19.00
HP ProBook 430 G6 Firmware
HP ProBook 430 G7 Firmware<01.12.00
HP ProBook 430 G7 Firmware
HP ProBook 430 G8 Firmware<01.08.02
HP ProBook 430 G8 Firmware
HP ProBook 440 G5 Firmware<01.19.00
HP ProBook 440 G5 Firmware
HP ProBook 440 G6<01.19.00
HP ProBook 440 G6 Firmware
HP ProBook 440 G7 Firmware<01.12.00
HP ProBook 440 G7 Firmware
HP ProBook 440 G8 Firmware<01.08.02
HP ProBook 440 G8 Firmware
HP ProBook 450 G5 Firmware<01.19.00
HP ProBook 450 G5 Firmware
HP ProBook 450 G6 Firmware<01.19.00
HP ProBook 450 G6 Firmware
HP ProBook 450 G7 Firmware<01.12.00
HP ProBook 450 G7 Firmware
HP ProBook 450 G8 Firmware<01.08.02
HP ProBook 450 G8 Firmware
HP ProBook 470 G5 Firmware<01.19.00
HP ProBook 470 G5 Firmware
HP ProBook 630 G8 Firmware<01.08.01
HP ProBook 630 G8 Firmware
HP ProBook 640 G4 Firmware<01.19.00
HP ProBook 640 G4 Firmware
HP ProBook 640 G5<01.12.00
HP ProBook 640 G5 Firmware
HP ProBook 640 G7 Firmware<01.08.00
HP ProBook 640 G7 Firmware
HP ProBook 640 G8 Firmware<01.08.01
HP ProBook 640 G8 Firmware
HP ProBook 650 G4<01.19.00
HP ProBook 650 G4
HP ProBook 650 G5 Firmware<01.12.00
HP ProBook 650 G5 Firmware
HP ProBook 650 G7<01.08.00
HP ProBook 650 G7 Firmware
HP ProBook 650 G8<01.08.01
HP ProBook 650 G8 Firmware
HP ProBook x360 11 G3 Education Edition Firmware<01.18.00
HP ProBook x360 11 G3 Education Edition Firmware
HP ProBook x360 11 G4 EE Firmware<01.13.00
HP ProBook x360 11 G4 Education Edition Firmware
HP ProBook x360 11 G5 EE Firmware<01.09.00
HP ProBook x360 11 G5 EE
HP ProBook x360 11 G6 Education Edition Firmware<01.09.00
HP ProBook x360 11 G6 EE
HP ProBook x360 11 G7 EE Firmware<01.08.00
HP ProBook x360 11 G7 Education Edition Firmware
HP ProBook x360 440 G1 Firmware<01.19.00
HP ProBook x360 440 G1 Firmware
HP ZBook 14u G5 Firmware<01.19.00
HP ZBook 14u G5 Firmware
HP ZBook 14u G6 Firmware<01.12.00
HP ZBook 14u G6 Mobile Workstation
HP ZBook 15 G5<01.19.00
HP ZBook 15 G5 Firmware
HP ZBook 15u G6 Firmware<01.12.00
HP ZBook 15 G6
HP ZBook 15u G5<01.19.00
HP ZBook 15u G5 Firmware
HP ZBook 15u G6 Firmware<01.12.00
HP ZBook 15u G6 Firmware
HP ZBook 17 G5 Firmware<01.19.00
HP ZBook 17
HP ZBook 17 G6<01.12.00
HP ZBook 17 G6 Firmware
HP ZBook Create G7 Firmware<01.08.00
HP ZBook Create G7
HP ZBook Firefly 14 G7<01.08.00
HP ZBook Firefly 14 G7 Firmware
HP ZBook Firefly 14 G8 Firmware<01.08.00
HP ZBook Firefly 14 G8 Firmware
HP ZBook Firefly 15 G7<01.08.00
HP ZBook Firefly 15 G7 Firmware
HP ZBook Firefly 15 G8<01.08.00
HP ZBook Firefly 15 G8 Firmware
HP ZBook Fury 15 G7 Firmware<01.08.00
HP ZBook Fury 15 G7
HP ZBook Fury G8 Firmware<01.08.01
HP ZBook Fury 15 G8 Firmware
HP ZBook Fury 17 G7<01.08.00
HP ZBook Fury 17 G7 Firmware
HP ZBook Fury 17 G8 Firmware<01.08.01
HP ZBook Fury 17 G8 Firmware
HP ZBook Power 15 G8 Firmware<01.08.00
HP ZBook Power 15 G8 Firmware
HP ZBook Power G7 Firmware<01.08.00
HP ZBook Power G7 Firmware
HP ZBook Studio 15 G8 Firmware<01.08.00
HP ZBook Studio 15 G8 Firmware
HP ZBook Studio G5<01.19.00
HP ZBook Studio G5
HP ZBook Studio G7 Firmware<01.08.00
HP ZBook Studio G7
HP ZBook Studio x360 G5 Firmware<01.19.00
HP ZBook Studio x360 G5 Firmware
HP Zhan 66 Pro 13 G2<01.19.00
HP Zhan 66 Pro 13 G2 Firmware
HP Zhan 66 Pro 14 G2 Firmware<01.19.00
HP Zhan 66 Pro 14 G2 Firmware
HP Zhan 66 Pro 14 G3<01.12.00
HP Zhan 66 Pro A 14 G3
HP Zhan 66 Pro A 14 G4 Notebook PC Firmware<01.08.02
HP Zhan 66 Pro 14 G4 Firmware
HP Zhan 66 Pro 15 G2<01.19.00
HP Zhan 66 Pro 15 G2
HP Zhan 66 Pro 15 G3 Firmware<01.12.00
HP Zhan 66 Pro 15 G3 Firmware
HP Zhan 66 Pro G1 Microtower PC Firmware<01.19.00
HP Zhan 66 Pro G1 Firmware
HP Zhan X 13 G2 Firmware<01.12.00
HP Zhan X 13 G2 Firmware
HP 260 G3 Desktop Mini PC Firmware<=2.17.00
HP 260 G3 Desktop Mini PC Firmware
HP EliteDesk 800 35w G4 Desktop Mini Firmware<=2.18.00
HP EliteDesk 800 35w G4 Desktop Mini
HP Elitedesk 800 65W G4 Desktop Mini PC<=2.18.00
HP Elitedesk 800 65W G4 Desktop Mini
HP EliteDesk 800 95W G4 Desktop Mini Firmware<=2.18.00
HP EliteDesk 800 95W G4 Desktop Mini Firmware
HP Elitedesk 800 G4 Small Form Factor PC Firmware<=2.18.00
HP EliteDesk 800 G4
HP EliteDesk 800 G4 Tower PC Firmware<=2.18.00
HP Elitedesk 800 G4 Tower PC Firmware
HP EliteDesk 800 G4 Workstation Firmware<=2.18.00
HP Elitedesk 800 G4
HP EliteDesk 800 G5 Desktop Mini<=2.12.00
HP EliteDesk 800 G5 Desktop Mini
HP EliteDesk 800 G5 SFF Firmware<=2.12.00
HP EliteDesk 800 G5 Small Form Factor
HP EliteDesk 800 G5 Tower Firmware<=2.12.00
HP EliteDesk 800 G5 Tower
HP EliteDesk 800 G6 Desktop Mini Firmware<=2.10.00
HP EliteDesk 800 G6 Desktop Mini
HP EliteDesk 800 G6 Small Form Factor Firmware<=2.10.00
HP EliteDesk 800 G6 Small Form Factor Firmware
HP EliteDesk 800 G6 Tower Firmware<=2.10.00
HP EliteDesk 800 G6
HP EliteDesk 800 G8 Desktop Mini Firmware<=2.07.00
HP EliteDesk 800 G8 Desktop Mini PC Firmware
HP EliteDesk 800 G8 Small Form Factor PC firmware<=2.07.00
HP EliteDesk 800 G8 Small Form Factor
HP EliteDesk 800 G8 Tower Firmware<=2.07.00
HP EliteDesk 800 G8
HP EliteDesk 805 G6 Firmware<=2.07.00
HP EliteDesk 805 G6 Desktop Mini
HP EliteDesk 805 G6 Small Form Factor Firmware<=2.07.00
HP EliteDesk 805 G6 Small Form Factor
HP EliteDesk 805 G8 Firmware<=2.03.00
HP EliteDesk 805 G8 Desktop Mini
HP EliteDesk 805 G8 Small Form Factor Firmware<=2.03.00
HP EliteDesk 805 G8 Small Form Factor PC Firmware
HP Elitedesk 880 G4 Tower Firmware<=2.18.00
HP EliteDesk 880 G4
HP EliteDesk 880 G5 Tower PC Firmware<=2.12.00
HP EliteDesk 880 G5 Tower
HP EliteDesk 880 G6 Tower PC Firmware<=2.10.00
HP EliteDesk 880 G6 Tower
HP EliteDesk 880 G8 Firmware<=2.07.00
HP EliteDesk 880 G8 Tower
HP EliteOne 1000 G2 23.8-in All-in-One Business Firmware<=2.18.00
HP EliteOne 1000 G2 23.8-in Touch All-in-One Business
HP EliteOne 1000 G2 23.8-in Touch All-in-One Business Firmware<=2.18.00
HP EliteOne 1000 G2 23.8-in Touch All-in-One Business
HP EliteOne 1000 G2 27-in 4K UHD All-in-One Business Firmware<=2.18.00
HP EliteOne 1000 G2 27-in 4K UHD All-in-One Business PC Firmware
HP EliteOne 1000 G2 34-in Curved All-in-One Business Firmware<=2.18.00
HP EliteOne 1000 G2 34-in Curved All-in-One Business PC Firmware
HP EliteOne 800 G4 23.8-in Healthcare Edition All-in-One Business PC Firmware<=2.18.00
HP EliteOne 800 G4 23.8-in Healthcare Edition All-in-One Business PC Firmware
HP EliteOne 800 G4 23.8-inch Non-Touch GPU All-in-One Firmware<=2.18.00
HP EliteOne 800 G4 23.8-inch Non-Touch All-in-One Firmware
HP EliteOne 800 G4 23.8-inch Non-Touch GPU All-in-One Firmware<=2.18.00
HP EliteOne 800 G4 23.8-inch Non-Touch GPU All-in-One
HP EliteOne 800 G4 23.8-inch Touch All-in-One Firmware<=2.18.00
HP EliteOne 800 G4 23.8-inch Touch All-in-One Firmware
HP EliteOne 800 G4 23.8-inch Touch GPU All-in-One Firmware<=2.18.00
HP EliteOne 800 G4 23.8-inch Touch GPU All-in-One
HP EliteOne 800 G5 Healthcare Edition Firmware<=2.12.00
HP EliteOne 800 G5 Healthcare Edition Firmware
HP EliteOne 800 G5 23.8-in All-in-One Firmware<=2.12.00
HP EliteOne 800 G5 23.8-in Healthcare Edition All-in-One
HP EliteOne 800 G6 24 All-in-One Firmware<=2.10.00
HP EliteOne 800 G6 24 All-in-One
HP EliteOne 800 G6 Firmware<=2.10.00
HP EliteOne 800 G6 27 All-in-One PC Firmware
HP EliteOne 800 G8 24 Firmware<=2.07.00
HP EliteOne 800 G8 24 Firmware
HP EliteOne 800 G8 27 All-in-One Firmware<=2.07.00
HP EliteOne 800 G8 27 All-in-One PC Firmware
HP ProDesk 400 G4 Desktop Mini Firmware<=2.18.00
HP ProDesk 400 G4 Desktop Mini
HP ProDesk 400 G5 Desktop Mini Firmware<=2.12.00
HP ProDesk 400 G5 Desktop Mini
HP ProDesk 400 G5 Microtower firmware<=2.18.00
HP ProDesk 400 G5 Microtower PC Firmware
HP ProDesk 400 G5 Small Form Factor PC Firmware<=2.18.00
HP ProDesk 400 G5 Small Form Factor
HP ProDesk 400 G6 Desktop Mini PC<=2.10.00
HP ProDesk 400 G6 Desktop Mini
HP ProDesk 400 G6 Microtower Firmware<=2.12.00
HP ProDesk 400 G6 Microtower Firmware
HP ProDesk 400 G6 Small Form Factor PC<=2.12.00
HP ProDesk 400 G6 Small Form Factor
HP ProDesk 400 G7 Microtower Firmware<=2.10.00
HP ProDesk 400 G7 Microtower PC Firmware
HP ProDesk 400 G7 Small Form Factor Firmware<=2.10.00
HP ProDesk 400 G7 Small Form Factor PC Firmware
HP ProDesk 405 G8 Desktop Mini PC<=2.03.00
HP ProDesk 405 G8 Desktop Mini
HP ProDesk 405 G8 Small Form Factor Firmware<=2.03.00
HP ProDesk 405 G8 Small Form Factor PC Firmware
HP ProDesk 480 G5 Microtower Firmware<=2.18.00
HP ProDesk 480 G5 Microtower
HP ProDesk 480 G6 Microtower Firmware<=2.12.00
HP ProDesk 480 G6
HP ProDesk 480 G7 PCI Firmware<=2.10.00
HP Prodesk 480 G7 PCI Microtower PC Firmware
HP ProDesk 600 G4 Desktop Mini Firmware<=2.18.00
HP ProDesk 600 G4 Desktop Mini Firmware
HP ProDesk 600 G4 Microtower<=2.18.00
HP ProDesk 600 G4
HP ProDesk 600 G4 Microtower PC (with PCI slot) Firmware<=2.18.00
HP ProDesk 600 G4 Microtower PC
HP ProDesk 600 G4 Small Form Factor Firmware<=2.18.00
HP ProDesk 600 G4 Small Form Factor Firmware
HP ProDesk 600 G5 Desktop Mini<=2.12.00
HP ProDesk 600 G5 Desktop Mini
HP ProDesk 600 G5 Microtower<=2.12.00
HP ProDesk 600 G5 Microtower PC (with PCI slot) Firmware
HP ProDesk 600 G5 Microtower PC (with PCI Slot) Firmware<=2.12.00
HP ProDesk 600 G5 Microtower PC
HP ProDesk 600 G5 Small Form Factor Firmware<=2.12.00
HP ProDesk 600 G5 Small Form Factor Firmware
HP ProDesk 600 G6 Desktop Mini PC Firmware<=2.10.00
HP ProDesk 600 G6 Desktop Mini
HP ProDesk 600 G6 Microtower Firmware<=2.10.00
HP ProDesk 600 G6 Microtower
HP ProDesk 600 G6 Small Form Factor Firmware<=2.10.00
HP ProDesk 600 G6 Small Form Factor PC Firmware
HP ProDesk 680 G4 Microtower Firmware<=2.18.00
HP ProDesk 680 G4
HP ProDesk 680 G4 Microtower PC (with PCI slot) Firmware<=2.18.00
HP ProDesk 680 G4 Microtower PC (with PCI slot)
HP ProDesk 680 G6 PCI Firmware<=2.10.00
HP ProDesk 680 G6 PCI Microtower PC Firmware
HP ProOne 400 G4 20-inch Non-Touch All-in-One Business Firmware<=2.18.00
HP ProOne 400 G4 20-inch Non-Touch All-in-One Business
HP ProOne 400 G4 23.8-inch Non-Touch All-in-One Business Firmware<=2.18.00
HP ProOne 400 G4 23.8-inch Non-Touch All-in-One Business PC Firmware
HP ProOne 400 G5 20-inch All-in-One Business Firmware<=2.12.00
HP ProOne 400 G5 20-inch All-in-One Business
HP ProOne 400 G5 23.8-Inch All-in-One Business Firmware<=2.12.00
HP ProOne 400 G5 23.8-inch All-in-One Business
HP ProOne 400 G6 20 All-in-One PC<=2.10.00
HP ProOne 400 G6 20 All-in-One
HP ProOne 400 G6 24 All-in-One Firmware<=2.10.00
HP ProOne 400 G6 24 All-in-One PC Firmware
HP ProOne 440 G4 23.8-inch Non-Touch All-in-One Business Firmware<=2.18.00
HP ProOne 440 G4 23.8-inch Non-Touch All-in-One Business Firmware
HP ProOne 440 G5 23.8-in All-in-One Business Firmware<=2.12.00
HP ProOne 440 G5 23.8-in All-in-One Business Firmware
HP ProOne 440 G6 24 All-in-One PC<=2.10.00
HP ProOne 440 G6 24 All-in-One
HP ProOne 600 G4 21.5-inch Touch All-in-One Business Firmware<=2.18.00
HP ProOne 600 G4 21.5-inch Touch All-in-One Business Firmware
HP ProOne 600 G5 21.5-in All-in-One Business Firmware<=2.12.00
HP ProOne 600 G5 21.5-in All-in-One Business PC Firmware
HP ProOne 600 G6 Firmware<=2.10.00
HP ProOne 600 G6 22 All-in-One PC Firmware
HP Zhan 66 Pro G3 22 All-in-One PC<=2.10.00
HP Zhan 66 Pro G3 22 All-in-One
HP Zhan 66 Pro G3 24 All-in-One Firmware<=2.10.00
HP Zhan 66 Pro G3 24 All-in-One

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2021-39298?

    CVE-2021-39298 is classified as a high-severity vulnerability due to its potential for arbitrary code execution.

  • How do I fix CVE-2021-39298?

    To fix CVE-2021-39298, update the affected HP firmware to the latest version provided by HP.

  • What systems are affected by CVE-2021-39298?

    CVE-2021-39298 affects various HP workstation and desktop firmware versions prior to specified updates.

  • Can CVE-2021-39298 be exploited remotely?

    CVE-2021-39298 requires an attacker to have high privileges on the system, so it cannot be exploited remotely.

  • What are the potential consequences of CVE-2021-39298?

    Exploitation of CVE-2021-39298 could allow an attacker to bypass security mechanisms in UEFI firmware, leading to significant system compromise.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203