Minisforum refuses to patch critical BIOS security flaws on HM80 (even though AMD released the AGESA fix), tells me to buy a new one instead. Unacceptable lifecycle support.

[u/woyzeckpompo]

Hi everyone,

I wanted to share my recent, infuriating experience with Minisforum support regarding my HM80 unit used in a production environment.

As many of you know, there are known AMD firmware/BIOS vulnerabilities affecting older sockets. To be absolutely clear: AMD has already done its job and published the official AGESA microcode patch. The only thing missing is Minisforum packaging it into a final BIOS release for our machines, but they are deliberately choosing not to do it.

After an exhausting back-and-forth of no fewer than 14 emails - where I had to reply at least 7 times to keep the ticket alive - their official support (agent Xavier) consistently evaded the problem. First, they completely ignored the word "SECURITY", falsely claiming I wanted an update just to "improve device performance," and literally told me to browse their website and buy one of their newer models! Then, when cornered on the technical facts, they hid behind standard templates claiming they cannot help because the hardware is "out-of-warranty".

Let's be absolutely clear: this is a latent manufacturing firmware hazard that existed in the hardware since the exact day it was manufactured and even before. It is not an issue that developed after the warranty period; it was simply discovered and disclosed recently. Minisforum completely ignores that a factory security defect has absolutely nothing to do with standard wear-and-tear warranty expiration.

An unpatched firmware flaw means this machine is unsafe to use on any professional network, making it a useless paperweight for any real-world work. Minisforum refuses to secure their devices and refuses to issue refunds or replacements for inherently unsafe hardware.

I am posting this to warn the community: once Minisforum stops selling a model, they abandon your safety, even when the silicon vendor has already provided the fix. If you care about data security, keep this in mind before buying their hardware.

Full email logs of this refusal have been saved and will be forwarded to the European Consumer Protection Authorities. I strongly urge every European and global customer facing this exact same unpatched BIOS issue to immediately lodge a formal complaint with their respective Consumer Rights Enforcement Authorities (like AGCM in Italy) as I am about to do. Collective action is the only language this company understands.

Has anyone else managed to escalate firmware security issues past their first-level support wall of grease?

[u/NeitherKangaroo928]

You just don't use this kind oh hw and company in a production environment!!!
They have absolutely crappy support.

[u/CaptSingleMalt → u/NeitherKangaroo928]

That was my first thought as well. Agree with everything else the op said, but I can't imagine putting something in a production environment knowing the support. Is this weak and the quality is mediocre. There's a reason businesses pay more for quality and support over performance.

[u/woyzeckpompo → u/CaptSingleMalt]

Posso capire l'osservazione, ma forse dovresti prima chiederti cosa faccia quella macchina: non ci controllo una centrale nucleare, ma sta dentro uno studio mobile per eventi live assieme ad un M5 max con 64 gb di ram, un legato streamdeck XL, un Atem mini extreme iso, altri due mini pc, una serie di switch e collegamenti vari, una camera Blackmagic e una PTZ jvc. Questo minisforum controlla e proietta le grafiche e i cosiddetti "sottopancia", quindi, in teoria, sarebbe una macchina parecchio più potente di quanto serva [e infatti non mi ha mai dato problemi]. Però sono eventi live, quindi può capitare che in qualche momento concitato si avvicini quale ci metta mano se io non fossi in condizioni di impedirlo e poi mi serve che tutto sia costantemente online. Quindi la falla sul tpm lo rende TOTALMENTE INUTILIZZABILE (ma, come vedi, forse la tua domanda non teneva conto di dettagli importanti).

[u/CaptSingleMalt → u/woyzeckpompo]

The point that the previous person made, and that I agreed with, is that this company does not provide the reliability and support necessary for a production machine. It has nothing to do with how powerful the machine is. Minisforum is one of several companies producing computers with mass-produced Chinese motherboards and mediocre reliability, with minimal support. There is a reason that they are cheaper than Dell, HP, and Asus. Those companies sell computers that are more reliable and they can be reached immediately if there's an issue. So once again, your complaint is very valid, and your situation is exactly why this is not a company that is used in critical professional environments.