VYPR
← All advisories
High severity7.2NVD Advisory· Published May 29, 2019· Updated Jun 17, 2026

CVE-2019-6321

CVE-2019-6321

Description

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.

Affected products

9
  • Microfocus/Z4 G4 Core X Workstation Firmware2 versions
    cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:*:*:*range: <1.70
    • cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:linux:*:*range: <1.70
  • Microfocus/Z4 G4 Workstation Firmware2 versions
    cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:*:*:*range: <1.70
    • cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:linux:*:*range: <1.70
  • Microfocus/Z6 G4 Workstation Firmware2 versions
    cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:*:*:*range: <1.71
    • cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:linux:*:*range: <1.71
  • Microfocus/Z8 G4 Workstation Firmware2 versions
    cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:*:*:*range: <1.71
    • cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:linux:*:*range: <1.71
  • Microfocus/Workstation BIOSllm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.