CVEvulnerability

CVE-2019-18913

6.8 MEDIUM Published 2020-01-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).

Affected configurations

• hp elitedesk 800 g5 dm firmware (< 02.04.02) • hp elitedesk 800 g5 sff firmware (< 02.04.02) • hp elitedesk 800 g5 twr firmware (< 02.04.02) • hp eliteone 800 g5 aio firmware (< 02.04.02) • hp prodesk 400 g5 dm firmware (< 02.04.01) • hp prodesk 400 g6 mt firmware (< 02.04.01) • hp prodesk 400 g6 sff firmware (< 02.04.02) • hp prodesk 480 g6 mt firmware (< 02.04.01) • hp prodesk 600 g5 dm firmware (< 02.04.01) • hp prodesk 600 g5 mt firmware (< 02.04.01) • hp prodesk 600 g5 pci mt firmware (< 02.04.01) • hp prodesk 600 g5 sff firmware (< 02.04.01) • hp proone 400 g5 aio firmware (< 02.04.01) • hp proone 440 g5 aio firmware (< 02.04.01) • hp proone 600 g5 aio firmware (< 02.04.01) • hp elite dragonfly firmware (< 01.04.02) • hp elite x2 g4 firmware (< 01.04.02) • hp elitebook 830 g6 firmware (< 01.04.02) • hp elitebook 836 g6 firmware (< 01.04.02) • hp elitebook 840 g6 firmware (< 01.04.02) • hp elitebook 840 g6 healthcare edition firmware (< 01.04.02) • hp elitebook 846 g6 firmware (< 01.04.02) • hp elitebook 846 g6 healthcare edition firmware (< 01.04.02) • hp elitebook 850 g6 firmware (< 01.04.02) • hp elitebook x360 1030 g4 firmware (< 01.04.02) • hp elitebook x360 1040 g6 firmware (< 01.04.02) • hp elitebook x360 830 g6 firmware (< 01.04.02) • hp probook 640 g5 firmware (< 01.04.02) • hp probook 650 g5 firmware (< 01.04.02) • hp zbook 14u g6 mobile workstation firmware (< 01.04.02) • hp zbook 15u g6 mobile workstation firmware (< 01.04.02) • hp zhan x 13 g2 firmware (< 01.04.02) • hp zbook 17u g6 mobile workstation firmware (< 01.04.02)

References