VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Jan 31, 2020· Updated Jun 17, 2026

CVE-2019-18913

CVE-2019-18913

Description

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).

Affected products

2
  • Microfocus/Intel-based Business PCsllm-create
    Range: prior to 01.04.02; prior to 02.04.01; prior to 02.04.02
  • HP Inc./HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.v5
    Range: Depends on platform. Prior to 01.04.02

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.