CVE-2021-39300
📋 TL;DR
This CVE describes UEFI firmware vulnerabilities in certain HP PC products that could allow attackers to execute arbitrary code with elevated privileges. The vulnerability affects the system's BIOS/firmware layer, potentially compromising the entire system before the operating system loads. Only specific HP PC models with vulnerable UEFI firmware are affected.
💻 Affected Systems
- HP PC products with vulnerable UEFI firmware
📦 What is this software?
Elitebook 840 G5 Healthcare Edition Firmware by Hp
View all CVEs affecting Elitebook 840 G5 Healthcare Edition Firmware →
Elitebook 840 G6 Healthcare Edition Firmware by Hp
View all CVEs affecting Elitebook 840 G6 Healthcare Edition Firmware →
Elitedesk 800 35w G4 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 35w G4 Desktop Mini Pc Firmware →
Elitedesk 800 65w G4 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 65w G4 Desktop Mini Pc Firmware →
Elitedesk 800 95w G4 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 95w G4 Desktop Mini Pc Firmware →
Elitedesk 800 G4 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G4 Small Form Factor Pc Firmware →
Elitedesk 800 G4 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G4 Tower Pc Firmware →
Elitedesk 800 G4 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G4 Tower Pc Firmware →
Elitedesk 800 G4 Workstation Edition Firmware by Hp
View all CVEs affecting Elitedesk 800 G4 Workstation Edition Firmware →
Elitedesk 800 G5 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G5 Desktop Mini Pc Firmware →
Elitedesk 800 G5 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G5 Small Form Factor Pc Firmware →
Elitedesk 800 G5 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G5 Tower Pc Firmware →
Elitedesk 800 G6 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G6 Desktop Mini Pc Firmware →
Elitedesk 800 G6 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G6 Small Form Factor Pc Firmware →
Elitedesk 800 G6 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G6 Tower Pc Firmware →
Elitedesk 800 G8 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G8 Desktop Mini Pc Firmware →
Elitedesk 800 G8 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G8 Small Form Factor Pc Firmware →
Elitedesk 800 G8 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 800 G8 Tower Pc Firmware →
Elitedesk 805 G6 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 805 G6 Desktop Mini Pc Firmware →
Elitedesk 805 G6 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Elitedesk 805 G6 Small Form Factor Pc Firmware →
Elitedesk 805 G8 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Elitedesk 805 G8 Desktop Mini Pc Firmware →
Elitedesk 805 G8 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Elitedesk 805 G8 Small Form Factor Pc Firmware →
Elitedesk 880 G4 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 880 G4 Tower Pc Firmware →
Elitedesk 880 G5 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 880 G5 Tower Pc Firmware →
Elitedesk 880 G6 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 880 G6 Tower Pc Firmware →
Elitedesk 880 G8 Tower Pc Firmware by Hp
View all CVEs affecting Elitedesk 880 G8 Tower Pc Firmware →
Eliteone 1000 G2 23.8 In All In One Business Pc Firmware by Hp
View all CVEs affecting Eliteone 1000 G2 23.8 In All In One Business Pc Firmware →
Eliteone 1000 G2 23.8 In Touch All In One Business Pc Firmware by Hp
View all CVEs affecting Eliteone 1000 G2 23.8 In Touch All In One Business Pc Firmware →
Eliteone 1000 G2 27 In 4k Uhd All In One Business Pc Firmware by Hp
View all CVEs affecting Eliteone 1000 G2 27 In 4k Uhd All In One Business Pc Firmware →
Eliteone 1000 G2 34 In Curved All In One Business Pc Firmware by Hp
View all CVEs affecting Eliteone 1000 G2 34 In Curved All In One Business Pc Firmware →
Eliteone 800 G4 23.8 In Healthcare Edition All In One Business Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G4 23.8 In Healthcare Edition All In One Business Pc Firmware →
Eliteone 800 G4 23.8 Inch Non Touch All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G4 23.8 Inch Non Touch All In One Pc Firmware →
Eliteone 800 G4 23.8 Inch Non Touch Gpu All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G4 23.8 Inch Non Touch Gpu All In One Pc Firmware →
Eliteone 800 G4 23.8 Inch Touch All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G4 23.8 Inch Touch All In One Pc Firmware →
Eliteone 800 G4 23.8 Inch Touch Gpu All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G4 23.8 Inch Touch Gpu All In One Pc Firmware →
Eliteone 800 G5 23.8 In Healthcare Edition All In One Firmware by Hp
View all CVEs affecting Eliteone 800 G5 23.8 In Healthcare Edition All In One Firmware →
Eliteone 800 G5 23.8 Inch All In One Firmware by Hp
View all CVEs affecting Eliteone 800 G5 23.8 Inch All In One Firmware →
Eliteone 800 G6 24 All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G6 24 All In One Pc Firmware →
Eliteone 800 G6 27 All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G6 27 All In One Pc Firmware →
Eliteone 800 G8 24 All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G8 24 All In One Pc Firmware →
Eliteone 800 G8 27 All In One Pc Firmware by Hp
View all CVEs affecting Eliteone 800 G8 27 All In One Pc Firmware →
Engage Flex Mini Retail System Firmware by Hp
View all CVEs affecting Engage Flex Mini Retail System Firmware →
Probook X360 11 G3 Education Edition Firmware by Hp
View all CVEs affecting Probook X360 11 G3 Education Edition Firmware →
Probook X360 11 G4 Education Edition Firmware by Hp
View all CVEs affecting Probook X360 11 G4 Education Edition Firmware →
Probook X360 11 G5 Education Edition Firmware by Hp
View all CVEs affecting Probook X360 11 G5 Education Edition Firmware →
Probook X360 11 G6 Education Edition Firmware by Hp
View all CVEs affecting Probook X360 11 G6 Education Edition Firmware →
Probook X360 11 G7 Education Edition Firmware by Hp
View all CVEs affecting Probook X360 11 G7 Education Edition Firmware →
Prodesk 400 G4 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G4 Desktop Mini Pc Firmware →
Prodesk 400 G5 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G5 Desktop Mini Pc Firmware →
Prodesk 400 G5 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G5 Microtower Pc Firmware →
Prodesk 400 G5 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G5 Small Form Factor Pc Firmware →
Prodesk 400 G6 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G6 Desktop Mini Pc Firmware →
Prodesk 400 G6 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G6 Microtower Pc Firmware →
Prodesk 400 G6 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G6 Small Form Factor Pc Firmware →
Prodesk 400 G7 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G7 Microtower Pc Firmware →
Prodesk 400 G7 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Prodesk 400 G7 Small Form Factor Pc Firmware →
Prodesk 405 G8 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Prodesk 405 G8 Desktop Mini Pc Firmware →
Prodesk 405 G8 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Prodesk 405 G8 Small Form Factor Pc Firmware →
Prodesk 480 G5 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 480 G5 Microtower Pc Firmware →
Prodesk 480 G6 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 480 G6 Microtower Pc Firmware →
Prodesk 480 G7 Pci Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 480 G7 Pci Microtower Pc Firmware →
Prodesk 600 G4 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G4 Desktop Mini Pc Firmware →
Prodesk 600 G4 Microtower Pc \(with Pci Slot\) Firmware by Hp
View all CVEs affecting Prodesk 600 G4 Microtower Pc \(with Pci Slot\) Firmware →
Prodesk 600 G4 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G4 Microtower Pc Firmware →
Prodesk 600 G4 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G4 Small Form Factor Pc Firmware →
Prodesk 600 G5 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G5 Desktop Mini Pc Firmware →
Prodesk 600 G5 Microtower Pc \(with Pci Slot\) Firmware by Hp
View all CVEs affecting Prodesk 600 G5 Microtower Pc \(with Pci Slot\) Firmware →
Prodesk 600 G5 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G5 Microtower Pc Firmware →
Prodesk 600 G5 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G5 Small Form Factor Pc Firmware →
Prodesk 600 G6 Desktop Mini Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G6 Desktop Mini Pc Firmware →
Prodesk 600 G6 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G6 Microtower Pc Firmware →
Prodesk 600 G6 Small Form Factor Pc Firmware by Hp
View all CVEs affecting Prodesk 600 G6 Small Form Factor Pc Firmware →
Prodesk 680 G4 Microtower Pc \(with Pci Slot\) Firmware by Hp
View all CVEs affecting Prodesk 680 G4 Microtower Pc \(with Pci Slot\) Firmware →
Prodesk 680 G4 Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 680 G4 Microtower Pc Firmware →
Prodesk 680 G6 Pci Microtower Pc Firmware by Hp
View all CVEs affecting Prodesk 680 G6 Pci Microtower Pc Firmware →
Proone 400 G4 20 Inch Non Touch All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 400 G4 20 Inch Non Touch All In One Business Pc Firmware →
Proone 400 G4 23.8 Inch Non Touch All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 400 G4 23.8 Inch Non Touch All In One Business Pc Firmware →
Proone 400 G5 20 Inch All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 400 G5 20 Inch All In One Business Pc Firmware →
Proone 400 G5 23.8 Inch All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 400 G5 23.8 Inch All In One Business Pc Firmware →
Proone 400 G6 20 All In One Pc Firmware by Hp
View all CVEs affecting Proone 400 G6 20 All In One Pc Firmware →
Proone 400 G6 24 All In One Pc Firmware by Hp
View all CVEs affecting Proone 400 G6 24 All In One Pc Firmware →
Proone 440 G4 23.8 Inch Non Touch All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 440 G4 23.8 Inch Non Touch All In One Business Pc Firmware →
Proone 440 G5 23.8 In All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 440 G5 23.8 In All In One Business Pc Firmware →
Proone 440 G6 24 All In One Pc Firmware by Hp
View all CVEs affecting Proone 440 G6 24 All In One Pc Firmware →
Proone 600 G4 21.5 Inch Touch All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 600 G4 21.5 Inch Touch All In One Business Pc Firmware →
Proone 600 G5 21.5 In All In One Business Pc Firmware by Hp
View all CVEs affecting Proone 600 G5 21.5 In All In One Business Pc Firmware →
Proone 600 G6 22 All In One Pc Firmware by Hp
View all CVEs affecting Proone 600 G6 22 All In One Pc Firmware →
Z1 Entry Tower G5 Workstation Firmware by Hp
View all CVEs affecting Z1 Entry Tower G5 Workstation Firmware →
Z1 Entry Tower G6 Workstation Firmware by Hp
View all CVEs affecting Z1 Entry Tower G6 Workstation Firmware →
Z4 G4 Workstation \(core X\) Firmware by Hp
View all CVEs affecting Z4 G4 Workstation \(core X\) Firmware →
Z4 G4 Workstation \(core X\) Firmware by Hp
View all CVEs affecting Z4 G4 Workstation \(core X\) Firmware →
Z4 G4 Workstation \(core X\) Firmware by Hp
View all CVEs affecting Z4 G4 Workstation \(core X\) Firmware →
Z4 G4 Workstation \(xeon W\) Firmware by Hp
View all CVEs affecting Z4 G4 Workstation \(xeon W\) Firmware →
Z4 G4 Workstation \(xeon W\) Firmware by Hp
View all CVEs affecting Z4 G4 Workstation \(xeon W\) Firmware →
Z4 G4 Workstation \(xeon W\) Firmware by Hp
View all CVEs affecting Z4 G4 Workstation \(xeon W\) Firmware →
Zhan 66 Pro G3 22 All In One Pc Firmware by Hp
View all CVEs affecting Zhan 66 Pro G3 22 All In One Pc Firmware →
⚠️ Risk & Real-World Impact
Worst Case
Complete system compromise with persistent malware that survives OS reinstallation and disk formatting, allowing attackers to maintain long-term access and control over the device.
Likely Case
Local privilege escalation allowing attackers to bypass security controls, install persistent malware, or access sensitive system resources.
If Mitigated
Limited impact if physical access controls are strong and users have limited privileges, though firmware-level attacks remain difficult to detect.
🎯 Exploit Status
Firmware exploitation typically requires local access and specialized knowledge. No public exploit code is mentioned in the references.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Updated UEFI firmware versions from HP
Vendor Advisory: https://support.hp.com/us-en/document/ish_5661066-5661090-16
Restart Required: Yes
Instructions:
1. Visit HP Support website. 2. Enter your HP PC model. 3. Download latest UEFI firmware update. 4. Run the update utility. 5. Restart system as prompted.
🔧 Temporary Workarounds
Physical Security Controls
allRestrict physical access to vulnerable systems to prevent local exploitation
Secure Boot Enforcement
allEnable and enforce Secure Boot in UEFI settings to prevent unauthorized firmware modifications
🧯 If You Can't Patch
- Isolate affected systems from critical networks and sensitive data
- Implement strict physical access controls and monitoring for affected devices
🔍 How to Verify
Check if Vulnerable:
Check HP Support site with your PC model to see if it's listed as affected
Check Version:
Windows: wmic bios get smbiosbiosversion
Linux: sudo dmidecode -s bios-version
Verify Fix Applied:
Check UEFI firmware version in BIOS settings matches latest version from HP Support
📡 Detection & Monitoring
Log Indicators:
- Unexpected BIOS/UEFI firmware modification events
- System boot anomalies
Network Indicators:
- Unusual outbound connections during boot process
SIEM Query:
EventID=12 OR EventID=13 (System boot events) with suspicious details