CVE-2019-18913
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
- Score
- CVSS 3.1 6.8 Medium
- Status
- Modified - hp-security-alert@hp.com
- Published
- 2020-01-31
- Last modified
- 2024-08-05
Affected products
- Elite Dragonfly Firmware (Hp)
- Elite X2 G4 Firmware (Hp)
- Elitebook 830 G6 Firmware (Hp)
- Elitebook 836 G6 Firmware (Hp)
- Elitebook 840 G6 Firmware (Hp)
- Elitebook 840 G6 Healthcare Edition Firmware (Hp)
- Elitebook 846 G6 Firmware (Hp)
- Elitebook 846 G6 Healthcare Edition Firmware (Hp)
- Elitebook 850 G6 Firmware (Hp)
- Elitebook X360 1030 G4 Firmware (Hp)
- Elitebook X360 1040 G6 Firmware (Hp)
- Elitebook X360 830 G6 Firmware (Hp)
- Elitedesk 800 G5 Dm Firmware (Hp)
- Elitedesk 800 G5 Sff Firmware (Hp)
- Elitedesk 800 G5 Twr Firmware (Hp)
- Eliteone 800 G5 Aio Firmware (Hp)
- Probook 640 G5 Firmware (Hp)
- Probook 650 G5 Firmware (Hp)
- Prodesk 400 G5 Dm Firmware (Hp)
- Prodesk 400 G6 Mt Firmware (Hp)
- Prodesk 400 G6 Sff Firmware (Hp)
- Prodesk 480 G6 Mt Firmware (Hp)
- Prodesk 600 G5 Dm Firmware (Hp)
- Prodesk 600 G5 Mt Firmware (Hp)
- Prodesk 600 G5 Pci Mt Firmware (Hp)
- Prodesk 600 G5 Sff Firmware (Hp)
- Proone 400 G5 Aio Firmware (Hp)
- Proone 440 G5 Aio Firmware (Hp)
- Proone 600 G5 Aio Firmware (Hp)
- Zbook 14u G6 Mobile Workstation Firmware (Hp)
- Zbook 15u G6 Mobile Workstation Firmware (Hp)
- Zbook 17u G6 Mobile Workstation Firmware (Hp)
- Zhan X 13 G2 Firmware (Hp)
- Hp Intel-based Business Pcs That Support Microsoft Windows 10 Kernel Dma Protection. (Hp Inc.)
References
- https://support.hp.com/us-en/document/c06549501
