The vulnerability of the EFI_BOOT_SERVICES component of Hewlett-Packard Development Company L.P.’s desktop workstations, personal computers, and cash registers allows a hacker to exploit their privileges.

🗓️ 26 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

HP EFI_BOOT_SERVICES flaw lets attackers gain elevated privileges due to insufficient input verification.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2019-16284	5 Nov 201920:16	–	cve
Cvelist	CVE-2019-16284	5 Nov 201920:16	–	cvelist
EUVD	EUVD-2019-7082	7 Oct 202500:30	–	euvd
Hewlett-Packard	HPSBHF03631 rev. 6 - BIOS Privilege Elevation Vulnerability	25 Sep 201900:00	–	hp
NVD	CVE-2019-16284	5 Nov 201921:15	–	nvd
OSV	CVE-2019-16284	5 Nov 201921:15	–	osv
Prion	Privilege escalation	5 Nov 201921:15	–	prion
RedhatCVE	CVE-2019-16284	7 Jan 202609:31	–	redhatcve

Vulners

Node

hp hp_260_g1_dmRange<2.27

OR

hp hp_280_pro_g1_microtower_pcRange<80.3

OR

hp hp_elite_sliceRange<2.42

OR

hp hp_elite_x2_1011_g1_tabletRange<1.27

OR

hp hp_elite_x2_1011_g1_tabletRange<1.42

OR

hp hp_elitebook_1030_g1_notebookRange<1.42

OR

hp hp_elitebook_1040_g2_notebook_pcRange<1.17

OR

hp hp_elitebook_720_g1_notebook_pcRange<1.48

OR

hp hp_elitebook_720_g2_notebook_pcRange<1.29

OR

hp hp_elitebook_740_g1_notebook_pcRange<1.48

OR

hp hp_elitebook_740_g2_notebook_pcRange<1.29

OR

hp hp_elitebook_750_g1_notebook_pcRange<1.48

OR

hp hp_elitebook_750_g2_notebook_pcRange<1.29

OR

hp hp_elitebook_820_g1_notebook_pcRange<1.48

OR

hp hp_elitebook_820_g2_notebook_pcRange<1.29

OR

hp hp_elitebook_820_g3_notebook_pcRange<1.42

OR

hp hp_elitebook_828_g3_notebook_pcRange<1.42

OR

hp hp_elitebook_840_g1_notebook_pcRange<1.48

OR

hp hp_elitebook_840_g2_notebook_pcRange<1.29

OR

hp hp_elitebook_840_g3_notebook_pcRange<1.42

OR

hp hp_elitebook_848_g3_notebook_pcRange<1.42

OR

hp hp_elitebook_850_g1_notebook_pcRange<1.48

OR

hp hp_elitebook_850_g2_notebook_pcRange<1.29

OR

hp hp_elitebook_850_g3_notebook_pcRange<1.42

OR

hp hp_elitebook_folio_1020_g1_notebook_pcRange<1.24

OR

hp hp_elitebook_folio_1020_g1_special_edition_notebook_pcRange<1.24

OR

hp hp_elitebook_folio_1040_g1_notebook_pcRange<1.44

OR

hp hp_elitebook_folio_1040_g3_notebook_pcRange<1.42

OR

hp hp_elitebook_folio_g1_notebook_pcRange<1.42

OR

hp hp_elitebook_revolve_810_g2Range<1.45

OR

hp hp_elitebook_revolve_810_g3Range<1.2

OR

hp hp_elitedesk_800_g2_dmRange<2.42

OR

hp hp_elitedesk_800_g2_sffRange<2.42

OR

hp hp_elitedesk_800_g2_twrRange<2.42

OR

hp hp_eliteone_800_g2_aio_pcRange<2.42

OR

hp hp_elitepad_1000_g2Range<1.48

OR

hp hp_mp9_g2_retail_systemRange<2.42

OR

hp hp_pro_tablet_10_ee_g1Range<1.31

OR

hp hp_pro_tablet_608_g1Range<1.21

OR

hp hp_pro_x2_612_g1_tabletRange<1.48

OR

hp hp_probook_11_g1_education_editionRange<1.17

OR

hp hp_probook_11_g2_education_editionRange<1.42

OR

hp hp_probook_430_g1_notebook_pcRange<1.49

OR

hp hp_probook_430_g1_notebook_pcRange<1.52

OR

hp hp_probook_440_g1_notebook_pcRange<1.49

OR

hp hp_probook_440_g2_notebook_pcRange<1.52

OR

hp hp_probook_440_g3_notebook_pcRange<1.42

OR

hp hp_probook_450_g1_notebook_pcRange<1.49

OR

hp hp_probook_450_g2_notebook_pcRange<1.52

OR

hp hp_probook_450_g3_notebook_pcRange<1.42

OR

hp hp_probook_470_g1_notebook_pcRange<1.49

OR

hp hp_probook_470_g2_notebook_pcRange<1.52

OR

hp hp_probook_470_g3_notebook_pcRange<1.42

OR

hp hp_probook_640_g1_notebook_pcRange<1.49

OR

hp hp_probook_640_g2_notebook_pcRange<1.42

OR

hp hp_probook_650_g1_notebook_pcRange<1.49

OR

hp hp_probook_650_g1_notebook_pcRange<1.42

OR

hp hp_probook_x360_11_g1_education_editionRange<1.3

OR

hp hp_prodesk_400_g1_dmRange<2.27

OR

hp hp_prodesk_400_g2_dmRange<2.42

OR

hp hp_prodesk_400_g2.5_sffRange<2.26

OR

hp hp_prodesk_400_g3_sffRange<2.42

OR

hp hp_prodesk_405/485_g2_mtRange<2.29

OR

hp hp_prodesk_480_g3_sffRange<2.42

OR

hp hp_prodesk_490_g2_mtRange<2.31

OR

hp hp_prodesk_490_g3_sffRange<2.42

OR

hp hp_prodesk_498_g2_mtRange<2.31

OR

hp hp_prodesk_498_g3_sffRange<2.42

OR

hp hp_prodesk_600_g2_dmRange<2.42

OR

hp hp_prodesk_600_g2_sffRange<2.42

OR

hp hp_proone_400_g2_aio_pcRange<2.42

OR

hp hp_proone_600_g2_aio_pcRange<2.42

OR

hp hp_rp2_retail_systemRange<2.21

OR

hp hp_rp9_g1_retail_system_model_9015_&_9018Range<2.42

OR

hp hp_zbook_14_g2_mobile_workstationRange<1.29

OR

hp hp_zbook_14_mobile_workstationRange<1.48

OR

hp hp_zbook_15_g2_mobile_workstationRange<1.25

OR

hp hp_zbook_15_g3_mobile_workstationRange<1.42

OR

hp hp_zbook_15_mobile_workstationRange<1.46

OR

hp hp_zbook_15u_g2_mobile_workstationRange<1.29

OR

hp hp_zbook_15u_g3_mobile_workstationRange<1.42

OR

hp hp_zbook_17_g2_mobile_workstationRange<1.25

OR

hp hp_zbook_17_g3_mobile_workstationRange<1.42

OR

hp hp_z238_microtower_workstation_linuxRange<1.77

OR

hp hp_z1_g3_workstationRange<1.26

OR

hp hp_z2_mini_g3_workstationRange<1.77

OR

hp hp_z238_microtower_workstationRange<1.77

OR

hp hp_z240_sff_workstationRange<1.77

OR

hp hp_z240_tower_workstationRange<1.77

Source	Link
support	www.support.hp.com/us-en/document/c06456250
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-16284
web	www.web.nvd.nist.gov/view/vuln/detail

26 Dec 2019 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 37.2

CVSS 29

EPSS0.00305

Hewlett Packard EFI Boot Services Input Verification Privilege Elevation Remote Attack Payment Devices