CVE-2021-3661: HP z1 All-In-One g3 Firmware

High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.

Affected products

• HP z1 All-In-One g3 Firmware: version 01.31 only
• HP z238 Microtower Firmware: version 01.83 only
• HP z240 Small Form Factor Firmware: version 01.83 only
• HP z240 Tower Firmware: version 01.83 only
• HP z2 Mini g3 Firmware: version 01.83 only
• HP z2 Mini g4 Firmware: version 01.08.01 only
• HP z2 Mini g5 Firmware: version 01.03.00_rev_a only
• HP z2 Small Form Factor g4 Firmware: version 01.08.01 only
• HP z2 Small Form Factor g5 Firmware: version 01.03.00_rev_a only
• HP z2 Small Form Factor g8 Firmware: version 01.03.00_rev_a only
• HP z2 Tower g4 Firmware: version 01.08.01 only
• HP z2 Tower g5 Firmware: version 01.03.00_rev_a only
• HP z2 Tower g8 Firmware: version 01.03.00_rev_a only
• HP z440 Firmware: version 2.58 only
• HP z4 g4 Firmware: version 02.75 only
• HP z640 Firmware: version 2.58 only
• HP z6 g4 Firmware: version 02.75 only
• HP z840 Firmware: version 2.58 only
• HP z8 g4 Firmware: version 02.75 only
• HP Zcentral 4r Firmware: version 01.18 only

Published 2022-12-12. Last modified 2026-06-17.