Medium severity6.8NVD Advisory· Published Jan 31, 2020· Updated Jun 17, 2026
CVE-2019-18913
CVE-2019-18913
Description
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
Affected products
35- Range: <01.04.02 or <02.04.01 or <02.04.02
- HP Inc./HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.v5Range: Depends on platform. Prior to 01.04.02
- cpe:2.3:o:hp:elitedesk_800_g5_dm_firmware:*:*:*:*:*:*:*:*Range: <02.04.02
- cpe:2.3:o:hp:elitedesk_800_g5_sff_firmware:*:*:*:*:*:*:*:*Range: <02.04.02
- cpe:2.3:o:hp:elitedesk_800_g5_twr_firmware:*:*:*:*:*:*:*:*Range: <02.04.02
- cpe:2.3:o:hp:eliteone_800_g5_aio_firmware:*:*:*:*:*:*:*:*Range: <02.04.02
- cpe:2.3:o:hp:prodesk_400_g5_dm_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:prodesk_400_g6_mt_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:prodesk_400_g6_sff_firmware:*:*:*:*:*:*:*:*Range: <02.04.02
- cpe:2.3:o:hp:prodesk_480_g6_mt_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:prodesk_600_g5_dm_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:prodesk_600_g5_mt_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:prodesk_600_g5_pci_mt_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:prodesk_600_g5_sff_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:proone_400_g5_aio_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:proone_440_g5_aio_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:proone_600_g5_aio_firmware:*:*:*:*:*:*:*:*Range: <02.04.01
- cpe:2.3:o:hp:elite_dragonfly_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_830_g6_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_836_g6_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_840_g6_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_840_g6_healthcare_edition_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_846_g6_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_846_g6_healthcare_edition_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_850_g6_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_x360_1030_g4_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_x360_1040_g6_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:elitebook_x360_830_g6_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:probook_640_g5_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:probook_650_g5_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:zbook_14u_g6_mobile_workstation_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:zbook_15u_g6_mobile_workstation_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
- cpe:2.3:o:hp:zbook_17u_g6_mobile_workstation_firmware:*:*:*:*:*:*:*:*Range: <01.04.02
Patches
Vulnerability mechanics
References
1- support.hp.com/us-en/document/c06549501nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.