Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-18913 Details

Description

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.8 MEDIUMVector:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.hp.com/us-en/document/c06549501	CVE	PatchVendor Advisory
https://support.hp.com/us-en/document/c06549501	[email protected]	PatchVendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
hp elitedesk 800 g5 dm firmware	< 02.04.02
CPE cpe:2.3:o:hp:elitedesk_800_g5_dm_firmware:::::::: Remediation No remediation found in references.
hp elitedesk 800 g5 dm	All versions
CPE cpe:2.3:h:hp:elitedesk_800_g5_dm:-:::::::* Remediation No remediation found in references.
hp elitedesk 800 g5 sff firmware	< 02.04.02
CPE cpe:2.3:o:hp:elitedesk_800_g5_sff_firmware:::::::: Remediation No remediation found in references.
hp elitedesk 800 g5 sff	All versions
CPE cpe:2.3:h:hp:elitedesk_800_g5_sff:-:::::::* Remediation No remediation found in references.
hp elitedesk 800 g5 twr firmware	< 02.04.02
CPE cpe:2.3:o:hp:elitedesk_800_g5_twr_firmware:::::::: Remediation No remediation found in references.
hp elitedesk 800 g5 twr	All versions
CPE cpe:2.3:h:hp:elitedesk_800_g5_twr:-:::::::* Remediation No remediation found in references.
hp eliteone 800 g5 aio firmware	< 02.04.02
CPE cpe:2.3:o:hp:eliteone_800_g5_aio_firmware:::::::: Remediation No remediation found in references.
hp eliteone 800 g5 aio	All versions
CPE cpe:2.3:h:hp:eliteone_800_g5_aio:-:::::::* Remediation No remediation found in references.
hp prodesk 400 g5 dm firmware	< 02.04.01
CPE cpe:2.3:o:hp:prodesk_400_g5_dm_firmware:::::::: Remediation No remediation found in references.
hp prodesk 400 g5 dm	All versions
CPE cpe:2.3:h:hp:prodesk_400_g5_dm:-:::::::* Remediation No remediation found in references.
hp prodesk 400 g6 mt firmware	< 02.04.01
CPE cpe:2.3:o:hp:prodesk_400_g6_mt_firmware:::::::: Remediation No remediation found in references.
hp prodesk 400 g6 mt	All versions
CPE cpe:2.3:h:hp:prodesk_400_g6_mt:-:::::::* Remediation No remediation found in references.
hp prodesk 400 g6 sff firmware	< 02.04.02
CPE cpe:2.3:o:hp:prodesk_400_g6_sff_firmware:::::::: Remediation No remediation found in references.
hp prodesk 400 g6 sff	All versions
CPE cpe:2.3:h:hp:prodesk_400_g6_sff:-:::::::* Remediation No remediation found in references.
hp prodesk 480 g6 mt firmware	< 02.04.01
CPE cpe:2.3:o:hp:prodesk_480_g6_mt_firmware:::::::: Remediation No remediation found in references.
hp prodesk 480 g6 mt	All versions
CPE cpe:2.3:h:hp:prodesk_480_g6_mt:-:::::::* Remediation No remediation found in references.
hp prodesk 600 g5 dm firmware	< 02.04.01
CPE cpe:2.3:o:hp:prodesk_600_g5_dm_firmware:::::::: Remediation No remediation found in references.
hp prodesk 600 g5 dm	All versions
CPE cpe:2.3:h:hp:prodesk_600_g5_dm:-:::::::* Remediation No remediation found in references.
hp prodesk 600 g5 mt firmware	< 02.04.01
CPE cpe:2.3:o:hp:prodesk_600_g5_mt_firmware:::::::: Remediation No remediation found in references.
hp prodesk 600 g5 mt	All versions
CPE cpe:2.3:h:hp:prodesk_600_g5_mt:-:::::::* Remediation No remediation found in references.
hp prodesk 600 g5 pci mt firmware	< 02.04.01
CPE cpe:2.3:o:hp:prodesk_600_g5_pci_mt_firmware:::::::: Remediation No remediation found in references.
hp prodesk 600 g5 pci mt	All versions
CPE cpe:2.3:h:hp:prodesk_600_g5_pci_mt:-:::::::* Remediation No remediation found in references.
hp prodesk 600 g5 sff firmware	< 02.04.01
CPE cpe:2.3:o:hp:prodesk_600_g5_sff_firmware:::::::: Remediation No remediation found in references.
hp prodesk 600 g5 sff	All versions
CPE cpe:2.3:h:hp:prodesk_600_g5_sff:-:::::::* Remediation No remediation found in references.
hp proone 400 g5 aio firmware	< 02.04.01
CPE cpe:2.3:o:hp:proone_400_g5_aio_firmware:::::::: Remediation No remediation found in references.
hp proone 400 g5 aio	All versions
CPE cpe:2.3:h:hp:proone_400_g5_aio:-:::::::* Remediation No remediation found in references.
hp proone 440 g5 aio firmware	< 02.04.01
CPE cpe:2.3:o:hp:proone_440_g5_aio_firmware:::::::: Remediation No remediation found in references.
hp proone 440 g5 aio	All versions
CPE cpe:2.3:h:hp:proone_440_g5_aio:-:::::::* Remediation No remediation found in references.
hp proone 600 g5 aio firmware	< 02.04.01
CPE cpe:2.3:o:hp:proone_600_g5_aio_firmware:::::::: Remediation No remediation found in references.
hp proone 600 g5 aio	All versions
CPE cpe:2.3:h:hp:proone_600_g5_aio:-:::::::* Remediation No remediation found in references.
hp elite dragonfly firmware	< 01.04.02
CPE cpe:2.3:o:hp:elite_dragonfly_firmware:::::::: Remediation No remediation found in references.
hp elite dragonfly	All versions
CPE cpe:2.3:h:hp:elite_dragonfly:-:::::::* Remediation No remediation found in references.
hp elite x2 g4 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elite_x2_g4_firmware:::::::: Remediation No remediation found in references.
hp elite x2 g4	All versions
CPE cpe:2.3:h:hp:elite_x2_g4:-:::::::* Remediation No remediation found in references.
hp elitebook 830 g6 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_830_g6_firmware:::::::: Remediation No remediation found in references.
hp elitebook 830 g6	All versions
CPE cpe:2.3:h:hp:elitebook_830_g6:-:::::::* Remediation No remediation found in references.
hp elitebook 836 g6 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_836_g6_firmware:::::::: Remediation No remediation found in references.
hp elitebook 836 g6	All versions
CPE cpe:2.3:h:hp:elitebook_836_g6:-:::::::* Remediation No remediation found in references.
hp elitebook 840 g6 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_840_g6_firmware:::::::: Remediation No remediation found in references.
hp elitebook 840 g6	All versions
CPE cpe:2.3:h:hp:elitebook_840_g6:-:::::::* Remediation No remediation found in references.
hp elitebook 840 g6 healthcare edition firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_840_g6_healthcare_edition_firmware:::::::: Remediation No remediation found in references.
hp elitebook 840 g6 healthcare edition	All versions
CPE cpe:2.3:h:hp:elitebook_840_g6_healthcare_edition:-:::::::* Remediation No remediation found in references.
hp elitebook 846 g6 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_846_g6_firmware:::::::: Remediation No remediation found in references.
hp elitebook 846 g6	All versions
CPE cpe:2.3:h:hp:elitebook_846_g6:-:::::::* Remediation No remediation found in references.
hp elitebook 846 g6 healthcare edition firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_846_g6_healthcare_edition_firmware:::::::: Remediation No remediation found in references.
hp elitebook 846 g6 healthcare edition	All versions
CPE cpe:2.3:h:hp:elitebook_846_g6_healthcare_edition:-:::::::* Remediation No remediation found in references.
hp elitebook 850 g6 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_850_g6_firmware:::::::: Remediation No remediation found in references.
hp elitebook 850 g6	All versions
CPE cpe:2.3:h:hp:elitebook_850_g6:-:::::::* Remediation No remediation found in references.
hp elitebook x360 1030 g4 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_x360_1030_g4_firmware:::::::: Remediation No remediation found in references.
hp elitebook x360 1030 g4	All versions
CPE cpe:2.3:h:hp:elitebook_x360_1030_g4:-:::::::* Remediation No remediation found in references.
hp elitebook x360 1040 g6 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_x360_1040_g6_firmware:::::::: Remediation No remediation found in references.
hp elitebook x360 1040 g6	All versions
CPE cpe:2.3:h:hp:elitebook_x360_1040_g6:-:::::::* Remediation No remediation found in references.
hp elitebook x360 830 g6 firmware	< 01.04.02
CPE cpe:2.3:o:hp:elitebook_x360_830_g6_firmware:::::::: Remediation No remediation found in references.
hp elitebook x360 830 g6	All versions
CPE cpe:2.3:h:hp:elitebook_x360_830_g6:-:::::::* Remediation No remediation found in references.
hp probook 640 g5 firmware	< 01.04.02
CPE cpe:2.3:o:hp:probook_640_g5_firmware:::::::: Remediation No remediation found in references.
hp probook 640 g5	All versions
CPE cpe:2.3:h:hp:probook_640_g5:-:::::::* Remediation No remediation found in references.
hp probook 650 g5 firmware	< 01.04.02
CPE cpe:2.3:o:hp:probook_650_g5_firmware:::::::: Remediation No remediation found in references.
hp probook 650 g5	All versions
CPE cpe:2.3:h:hp:probook_650_g5:-:::::::* Remediation No remediation found in references.
hp zbook 14u g6 mobile workstation firmware	< 01.04.02
CPE cpe:2.3:o:hp:zbook_14u_g6_mobile_workstation_firmware:::::::: Remediation No remediation found in references.
hp zbook 14u g6 mobile workstation	All versions
CPE cpe:2.3:h:hp:zbook_14u_g6_mobile_workstation:-:::::::* Remediation No remediation found in references.
hp zbook 15u g6 mobile workstation firmware	< 01.04.02
CPE cpe:2.3:o:hp:zbook_15u_g6_mobile_workstation_firmware:::::::: Remediation No remediation found in references.
hp zbook 15u g6 mobile workstation	All versions
CPE cpe:2.3:h:hp:zbook_15u_g6_mobile_workstation:-:::::::* Remediation No remediation found in references.
hp zhan x 13 g2 firmware	< 01.04.02
CPE cpe:2.3:o:hp:zhan_x_13_g2_firmware:::::::: Remediation No remediation found in references.
hp zhan x 13 g2	All versions
CPE cpe:2.3:h:hp:zhan_x_13_g2:-:::::::* Remediation No remediation found in references.
hp zbook 17u g6 mobile workstation firmware	< 01.04.02
CPE cpe:2.3:o:hp:zbook_17u_g6_mobile_workstation_firmware:::::::: Remediation No remediation found in references.
hp zbook 17u g6 mobile workstation	All versions
CPE cpe:2.3:h:hp:zbook_17u_g6_mobile_workstation:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 24, 2020	CWE Remap	[email protected]
Feb 14, 2020	Initial Analysis	[email protected]

CVE-2019-18913 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation