HP Envy 750 - Intel CSME tool reports "This system is vulnerable"

[KW115]

How do I remediate this critical security vulnerability? 

Tool Started 10/08/20 11:02:14 AM
Name: KEVINS-DESKTOP
Manufacturer: HP
Model: 750-177c
Processor Name: Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
OS Version: Microsoft Windows 10 Home Insider Preview
Status: This system is vulnerable.
Tool Stopped

[WyreNut]

Hello, and Welcome to the HP Support Community!

Not sure how exactly to fix this, but I found this article which has some suggestions:

https://www.csoonline.com/article/3530306/design-flaw-could-compromise-intel-platform-security-featu...

WyreNut

[KW115]

I've tried a couple of times to find a way to contact HP directly on this matter. As the desktop is out of warranty, HP provides no avenue to support critical issues like these affecting all machines such as mine without the customer first agreeing to be charges for any assistance. 

Please tell me I'm wrong and describe the support options I have. 

Kevin

[Kumar0307]

@KW115

For now, install updates using HP Support Assistant

1. In the search box, type and open HP Support Assistant. 
2. Check for updates. 
3. If the updates are available, click on install and restart the computer.  

Note: If you do not have HP Support Assistant installed, Click here to download the same.

Also, check for any pending windows update. Reboot the computer. 

Let me know how this goes.

[KW115]

Kumar,

I run HP Support Assistant every week. I have been doing so since I purchased the unit . The fact that there are no updates presented by the tool does not provide me any sense of comfort or security, as the vulnerability still exists, and HP has not provided and fix or remedy, and remains silent on the exposure for those of us with these machines in our offices or at home. 

Please provide something more concrete than the old "reboot your machine" and see if that fixes your problem suggestion!

Kevin

[Kumar0307]

@KW115

Kindly install the below update for the Intel ME firmware:

http://ftp.hp.com/pub/softpaq/sp82001-82500/sp82271.exe

For more info on this issue, refer to the security bulletin published by HP.

Hope this helps! Keep me posted. 

Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.

Click the “Kudos, Thumbs Up" on the bottom right to say “Thanks” for helping!

[KW115]

Applied the SP. It did not report on success or failure of the execution. 

Rebooted system. Run CSME tool. 

It reports as follows: 

Tool Started 10/26/20 3:02:17 PM
Name: KEVINS-DESKTOP
Manufacturer: HP
Model: 750-177c
Processor Name: Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
OS Version: Microsoft Windows 10 Home Insider Preview
Status: This system is vulnerable.
Tool Stopped

[KW115]

Kumar,

What is your next suggestion? 

Kevin

[KW115]

Kumar,

Still have not heard back from you or HP. If you look closely at the counts that this thread has been viewed, you will see there are a LOT of people interested. 

We are all waiting.

Kevin

[Kumar0307]

@KW115

Are you using a preview version of Win 10 OS?

If yes, you will have to use the original OS by performing a recovery on the PC. Refer to this document to know how - Resetting Your Computer

Let me know how this goes.