一、漏洞介绍
在某些惠普工作站BiOS（UEFI固件）中发现了一个潜在的安全漏洞，可能允许任意代码执行。惠普正在发布针对该潜在漏洞的固件缓解措施。
二、危害影响
未经授权的攻击者可通过CVE-2021-3661进行远程代码执行，进而导致目标系统被远程控制。
三、修复建议
目前，惠普官方已发布新版本修复了漏洞，请用户及时确认是否受到漏洞影响，尽快采取修补措施。
| HP Z1 All-in-One G3 Workstation |
BiOS (Windows 10, Windows 7) |
01.31 |
Rev 3 |
SP139297 |
|
| HP Z1 All-in-One G3 Workstation |
BiOS (Linux) |
01.31 |
Rev 3 |
SP139296 |
|
| HP Z2 Mini G3 Workstation |
BiOS (Windows 10, Windows 7) |
01.83 |
Rev 3 |
SP139300 |
|
| HP Z2 Mini G3 Workstation |
BiOS (Linux) |
01.83 |
Rev 3 |
SP139298 |
|
| HP Z2 Mini G4 Workstation |
BiOS (Windows 10, Windows 7) |
01.08.01 |
Rev 3 |
SP139134 |
|
| HP Z2 Mini G4 Workstation |
BiOS (Linux) |
01.08.01 |
Rev 3 |
SP139133 |
|
| HP Z2 Mini G5 Workstation |
BiOS (Windows 10) |
01.03.00 Rev A |
Rev 1 |
SP136650 |
|
| HP Z2 Mini G5 Workstation |
BiOS (Linux) |
01.03.00 Rev A |
Rev 1 |
SP136649 |
|
| HP Z2 Small Form Factor G4 Workstation |
BiOS (Windows 10, Windows 7) |
01.08.01 |
Rev 3 |
SP139134 |
|
| HP Z2 Small Form Factor G4 Workstation |
BiOS (Linux) |
01.08.01 |
Rev 3 |
SP139133 |
|
| HP Z2 Small Form Factor G5 Workstation |
BiOS (Windows 10) |
01.03.00 Rev A |
Rev 1 |
SP136650 |
|
| HP Z2 Small Form Factor G5 Workstation |
BiOS (Linux) |
01.03.00 Rev A |
Rev 1 |
SP136649 |
|
| HP Z2 Small Form Factor G8 Workstation |
BiOS (Windows 10) |
01.03.00 Rev A |
Rev 1 |
SP136247 |
|
| HP Z2 Small Form Factor G8 Workstation |
BiOS (Linux) |
01.03.00 Rev A |
Rev 1 |
SP136246 |
|
| HP Z2 Tower G4 Workstation |
BiOS (Windows 10, Windows 7) |
01.08.01 |
Rev 3 |
SP139134 |
|
| HP Z2 Tower G4 Workstation |
BiOS (Linux) |
01.08.01 |
Rev 3 |
SP139133 |
|
| HP Z2 Tower G5 Workstation |
BiOS (Windows 10) |
01.03.00 Rev A |
Rev 1 |
SP136650 |
|
| HP Z2 Tower G5 Workstation |
BiOS (Linux) |
01.03.00 Rev A |
Rev 1 |
SP136649 |
|
| HP Z2 Tower G8 Workstation |
BiOS (Windows 10) |
01.03.00 Rev A |
Rev 1 |
SP136247 |
|
| HP Z2 Tower G8 Workstation |
BiOS (Linux) |
01.03.00 Rev A |
Rev 1 |
SP136246 |
|
| HP Z238 Microtower Workstation |
BiOS (Windows 10, Windows 7) |
01.83 |
Rev 3 |
SP139293 |
|
| HP Z238 Microtower Workstation |
BiOS (Linux) |
01.83 |
Rev 3 |
SP139292 |
|
| HP Z240 Small Form Factor Workstation |
BiOS (Windows 10, Windows 7) |
01.83 |
Rev 3 |
SP139293 |
|
| HP Z240 Small Form Factor Workstation |
BiOS (Linux) |
01.83 |
Rev 3 |
SP139292 |
|
| HP Z240 Tower Workstation |
BiOS (Windows 10, Windows 7) |
01.83 |
Rev 3 |
SP139293 |
|
| HP Z240 Tower Workstation |
BiOS (Linux) |
01.83 |
Rev 3 |
SP139292 |
|
| HP Z4 G4 Workstation (Core-X) |
BiOS (Windows 10, Windows 7) |
02.75 |
Rev 1 |
SP136037 |
|
| HP Z4 G4 Workstation (Core-X) |
BiOS (Linux) |
02.75 |
Rev 1 |
SP136038 |
|
| HP Z4 G4 Workstation (Xeon W) |
BiOS (Windows 10, Windows 7) |
02.75 |
Rev 1 |
SP136035 |
|
| HP Z4 G4 Workstation (Xeon W) |
BiOS (Linux) |
02.75 |
Rev 1 |
SP136036 |
|
| HP Z440 Workstation |
BiOS (Windows 10, Windows 7) |
2.58 |
Rev 2 |
SP137086 |
|
| HP Z440 Workstation |
BiOS (Linux) |
2.58 |
Rev 2 |
SP137085 |
|
| HP Z6 G4 Workstation |
BiOS (Windows 10, Windows 7) |
02.75 |
Rev 1 |
SP136033 |
|
| HP Z6 G4 Workstation |
BiOS (Linux) |
02.75 |
Rev 1 |
SP136034 |
|
| HP Z640 Workstation |
BiOS (Windows 10, Windows 7) |
2.58 |
Rev 2 |
SP137086 |
|
| HP Z640 Workstation |
BiOS (Linux) |
2.58 |
Rev 2 |
SP137085 |
|
| HP Z8 G4 Workstation |
BiOS (Windows 10, Windows 7) |
02.75 |
Rev 1 |
SP136033 |
|
| HP Z8 G4 Workstation |
BiOS (Linux) |
02.75 |
Rev 1 |
SP136034 |
|
| HP Z840 Workstation |
BiOS (Windows 10, Windows 7) |
2.58 |
Rev 2 |
SP137086 |
|
| HP Z840 Workstation |
BiOS (Linux) |
2.58 |
Rev 2 |
SP137085 |
|
| HP ZCentral 4R Workstation |
BiOS (Windows 10) |
01.18 |
Rev 2 |
SP138359 |
|
| HP ZCentral 4R Workstation |
BiOS (Linux) |
01.18 |
Rev 2 |
SP138358 |
评论