CVEvulnerability

CVE-2019-6322

6.8 MEDIUM Published 2019-05-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-667

Description

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.

Affected configurations

• hp z4 g4 workstation firmware (< 1.70) • hp z4 g4 core-x workstation firmware (< 1.70) • hp z6 g4 workstation firmware (< 1.71) • hp z8 g4 workstation firmware (< 1.71)

Related

Weakness · CWE (1)

  • CWE-667 Improper Locking weakness

References