CVE Feed

    Dashboard / CVE / CVE-2019-18913

    CVE-2019-18913

    A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).

    Published:Jan 31, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 31, 2020
    EPSS Score:0.00081
    CVSS Score:6.8

    Affected Products

    Vendor
    Hp
    Product
    Elite Dragonfly
    Vendor
    Hp
    Product
    Elite Dragonfly Firmware
    Vendor
    Hp
    Product
    Elite X2 G4
    Vendor
    Hp
    Product
    Elite X2 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook 830 G6
    Vendor
    Hp
    Product
    Elitebook 830 G6 Firmware
    Vendor
    Hp
    Product
    Elitebook 836 G6
    Vendor
    Hp
    Product
    Elitebook 836 G6 Firmware
    Vendor
    Hp
    Product
    Elitebook 840 G6
    Vendor
    Hp
    Product
    Elitebook 840 G6 Firmware
    Vendor
    Hp
    Product
    Elitebook 840 G6 Healthcare Edition
    Vendor
    Hp
    Product
    Elitebook 840 G6 Healthcare Edition Firmware
    Vendor
    Hp
    Product
    Elitebook 846 G6
    Vendor
    Hp
    Product
    Elitebook 846 G6 Firmware
    Vendor
    Hp
    Product
    Elitebook 846 G6 Healthcare Edition
    Vendor
    Hp
    Product
    Elitebook 846 G6 Healthcare Edition Firmware
    Vendor
    Hp
    Product
    Elitebook 850 G6
    Vendor
    Hp
    Product
    Elitebook 850 G6 Firmware
    Vendor
    Hp
    Product
    Elitebook X360 1030 G4
    Vendor
    Hp
    Product
    Elitebook X360 1030 G4 Firmware
    Vendor
    Hp
    Product
    Elitebook X360 1040 G6
    Vendor
    Hp
    Product
    Elitebook X360 1040 G6 Firmware
    Vendor
    Hp
    Product
    Elitebook X360 830 G6
    Vendor
    Hp
    Product
    Elitebook X360 830 G6 Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 G5 Dm
    Vendor
    Hp
    Product
    Elitedesk 800 G5 Dm Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 G5 Sff
    Vendor
    Hp
    Product
    Elitedesk 800 G5 Sff Firmware
    Vendor
    Hp
    Product
    Elitedesk 800 G5 Twr
    Vendor
    Hp
    Product
    Elitedesk 800 G5 Twr Firmware
    Vendor
    Hp
    Product
    Eliteone 800 G5 Aio
    Vendor
    Hp
    Product
    Eliteone 800 G5 Aio Firmware
    Vendor
    Hp
    Product
    Probook 640 G5
    Vendor
    Hp
    Product
    Probook 640 G5 Firmware
    Vendor
    Hp
    Product
    Probook 650 G5
    Vendor
    Hp
    Product
    Probook 650 G5 Firmware
    Vendor
    Hp
    Product
    Prodesk 400 G5 Dm
    Vendor
    Hp
    Product
    Prodesk 400 G5 Dm Firmware
    Vendor
    Hp
    Product
    Prodesk 400 G6 Mt
    Vendor
    Hp
    Product
    Prodesk 400 G6 Mt Firmware
    Vendor
    Hp
    Product
    Prodesk 400 G6 Sff
    Vendor
    Hp
    Product
    Prodesk 400 G6 Sff Firmware
    Vendor
    Hp
    Product
    Prodesk 480 G6 Mt
    Vendor
    Hp
    Product
    Prodesk 480 G6 Mt Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G5 Dm
    Vendor
    Hp
    Product
    Prodesk 600 G5 Dm Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G5 Mt
    Vendor
    Hp
    Product
    Prodesk 600 G5 Mt Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G5 Pci Mt
    Vendor
    Hp
    Product
    Prodesk 600 G5 Pci Mt Firmware
    Vendor
    Hp
    Product
    Prodesk 600 G5 Sff
    Vendor
    Hp
    Product
    Prodesk 600 G5 Sff Firmware
    Vendor
    Hp
    Product
    Proone 400 G5 Aio
    Vendor
    Hp
    Product
    Proone 400 G5 Aio Firmware
    Vendor
    Hp
    Product
    Proone 440 G5 Aio
    Vendor
    Hp
    Product
    Proone 440 G5 Aio Firmware
    Vendor
    Hp
    Product
    Proone 600 G5 Aio
    Vendor
    Hp
    Product
    Proone 600 G5 Aio Firmware
    Vendor
    Hp
    Product
    Zbook 14u G6 Mobile Workstation
    Vendor
    Hp
    Product
    Zbook 14u G6 Mobile Workstation Firmware
    Vendor
    Hp
    Product
    Zbook 15u G6 Mobile Workstation
    Vendor
    Hp
    Product
    Zbook 15u G6 Mobile Workstation Firmware
    Vendor
    Hp
    Product
    Zbook 17u G6 Mobile Workstation
    Vendor
    Hp
    Product
    Zbook 17u G6 Mobile Workstation Firmware
    Vendor
    Hp
    Product
    Zhan X 13 G2
    Vendor
    Hp
    Product
    Zhan X 13 G2 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-27540 (CVSS 7.8) — A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain…
    CVE-2022-31646 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31645 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31644 (CVSS 7.8) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31642 (CVSS 7) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31641 (CVSS 7) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31640 (CVSS 7) — Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow…
    CVE-2022-31639 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31638 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…
    CVE-2022-31637 (CVSS 7.8) — Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain H…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High