Patching HP Security vulnerability

Products ITarian Patch Management
1

I have a number of laptops in the field potentially affected by this vulnerability (https://techcrunch.com/2017/12/11/some-hp-laptops-are-hiding-a-deactivated-keylogger/) and would like to know how to deploy this patch to install remotely (https://support.hp.com/us-en/document/c05827409). Thanks. -Manthu.

2

@MTekhna ,

We understand that this had concerned you greatly. We have coordinated with our development team and will provide you with an update on any process that can accomplish this task.

3

Hello @MTekhna

We understand your very valid concern. In order to relieve this problem, our operation team will prepare a script. In this script, you will be able to decide for the patch .exe file to install with respect to the model of your HP computers.

You can run this script from ITSM. Our team will contact with you when the script is ready.

my best regards,
Emrah

4

Hi @MTekhna

Reg the link you have provided (https://support.hp.com/us-en/document/c05827409) has many files, could you please tell me which product to download in order to remove the vulnerability.

Thank you.

5

Hi @Aravind_pandi The laptops we have affected are:

HP ProBook 430 G3 19.0.19.63.A.1 sp81836 ftp://ftp.hp.com/pub/softpaq/sp81501-82000/sp81836.exe
HP ProBook 430 G4 19.3.8.22.A.1 sp81835 ftp://ftp.hp.com/pub/softpaq/sp81501-82000/sp81835.exe
HP ProBook 440 G3 19.0.19.63.A.1 sp81836 ftp://ftp.hp.com/pub/softpaq/sp81501-82000/sp81836.exe
HP ProBook 440 G4 19.3.8.22.A.1 sp81835 ftp://ftp.hp.com/pub/softpaq/sp81501-82000/sp81835.exe
HP ProBook 450 G3 19.0.19.63.A.1 sp81836 ftp://ftp.hp.com/pub/softpaq/sp81501-82000/sp81836.exe
HP ProBook 450 G4 19.3.8.22.A.1 sp81835 ftp://ftp.hp.com/pub/softpaq/sp81501-82000/sp81835.exe
6

Hi @MTekhna

Please refer the attached json file for installing the hp driver package on your endpoint,

Edit Parameters:

URL= r’ftp://ftp.hp.com/pub/softpaq/sp81501-82000/sp81835.exe’ #Please provide the download link which you need to install on your machine

Note:

This script will download the package and install the setup in your endpoint.

Please provide your feedback.

Thank you.

20171215-Patching-up-HP-Security-Vulnerablity.json (2.01 KB)