CVE-2019-18913

🗓️ 31 Jan 2020 03:04:11Reported by hpType

Potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. Requires physical access to internal expansion slots for modifying UEFI code in memory. Affects HP Intel-based Business PCs supporting Microsoft Windows 10 Kernel DMA protection

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2019-18913	31 Jan 202003:04	–	cvelist
EUVD	EUVD-2019-8591	7 Oct 202500:30	–	euvd
Hewlett-Packard	HPSBHF03647 rev. 2 - HP Open-Chassis Pre-boot Direct Memory Access (DMA) Vulnerability	30 Jan 202000:00	–	hp
NVD	CVE-2019-18913	31 Jan 202004:15	–	nvd
Prion	Code injection	31 Jan 202004:15	–	prion
RedhatCVE	CVE-2019-18913	9 Jan 202610:17	–	redhatcve

NVD

Node

hp elitedesk_800_g5_dm_firmwareRange<02.04.02

AND

hp elitedesk_800_g5_dmMatch-

Node

hp elitedesk_800_g5_sff_firmwareRange<02.04.02

AND

hp elitedesk_800_g5_sffMatch-

Node

hp elitedesk_800_g5_twr_firmwareRange<02.04.02

AND

hp elitedesk_800_g5_twrMatch-

Node

hp eliteone_800_g5_aio_firmwareRange<02.04.02

AND

hp eliteone_800_g5_aioMatch-

Node

hp prodesk_400_g5_dm_firmwareRange<02.04.01

AND

hp prodesk_400_g5_dmMatch-

Node

hp prodesk_400_g6_mt_firmwareRange<02.04.01

AND

hp prodesk_400_g6_mtMatch-

Node

hp prodesk_400_g6_sff_firmwareRange<02.04.02

AND

hp prodesk_400_g6_sffMatch-

Node

hp prodesk_480_g6_mt_firmwareRange<02.04.01

AND

hp prodesk_480_g6_mtMatch-

Node

hp prodesk_600_g5_dm_firmwareRange<02.04.01

AND

hp prodesk_600_g5_dmMatch-

Node

hp prodesk_600_g5_mt_firmwareRange<02.04.01

AND

hp prodesk_600_g5_mtMatch-

Node

hp prodesk_600_g5_pci_mt_firmwareRange<02.04.01

AND

hp prodesk_600_g5_pci_mtMatch-

Node

hp prodesk_600_g5_sff_firmwareRange<02.04.01

AND

hp prodesk_600_g5_sffMatch-

Node

hp proone_400_g5_aio_firmwareRange<02.04.01

AND

hp proone_400_g5_aioMatch-

Node

hp proone_440_g5_aio_firmwareRange<02.04.01

AND

hp proone_440_g5_aioMatch-

Node

hp proone_600_g5_aio_firmwareRange<02.04.01

AND

hp proone_600_g5_aioMatch-

Node

hp elite_dragonfly_firmwareRange<01.04.02

AND

hp elite_dragonflyMatch-

Node

hp elite_x2_g4_firmwareRange<01.04.02

AND

hp elite_x2_g4Match-

Node

hp elitebook_830_g6_firmwareRange<01.04.02

AND

hp elitebook_830_g6Match-

Node

hp elitebook_836_g6_firmwareRange<01.04.02

AND

hp elitebook_836_g6Match-

Node

hp elitebook_840_g6_firmwareRange<01.04.02

AND

hp elitebook_840_g6Match-

Node

hp elitebook_840_g6_healthcare_edition_firmwareRange<01.04.02

AND

hp elitebook_840_g6_healthcare_editionMatch-

Node

hp elitebook_846_g6_firmwareRange<01.04.02

AND

hp elitebook_846_g6Match-

Node

hp elitebook_846_g6_healthcare_edition_firmwareRange<01.04.02

AND

hp elitebook_846_g6_healthcare_editionMatch-

Node

hp elitebook_850_g6_firmwareRange<01.04.02

AND

hp elitebook_850_g6Match-

Node

hp elitebook_x360_1030_g4_firmwareRange<01.04.02

AND

hp elitebook_x360_1030_g4Match-

Node

hp elitebook_x360_1040_g6_firmwareRange<01.04.02

AND

hp elitebook_x360_1040_g6Match-

Node

hp elitebook_x360_830_g6_firmwareRange<01.04.02

AND

hp elitebook_x360_830_g6Match-

Node

hp probook_640_g5_firmwareRange<01.04.02

AND

hp probook_640_g5Match-

Node

hp probook_650_g5_firmwareRange<01.04.02

AND

hp probook_650_g5Match-

Node

hp zbook_14u_g6_mobile_workstation_firmwareRange<01.04.02

AND

hp zbook_14u_g6_mobile_workstationMatch-

Node

hp zbook_15u_g6_mobile_workstation_firmwareRange<01.04.02

AND

hp zbook_15u_g6_mobile_workstationMatch-

Node

hp zhan_x_13_g2_firmwareRange<01.04.02

AND

hp zhan_x_13_g2Match-

Node

hp zbook_17u_g6_mobile_workstation_firmwareRange<01.04.02

AND

hp zbook_17u_g6_mobile_workstationMatch-

[
  {
    "product": "HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.",
    "vendor": "HP Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Depends on platform. Prior to 01.04.02"
      },
      {
        "status": "affected",
        "version": "or prior to 02.04.01"
      },
      {
        "status": "affected",
        "version": "or prior to 02.04.02."
      }
    ]
  }
]

Source	Link
support	www.support.hp.com/us-en/document/c06549501

21 Nov 2024 04:33Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.8

CVSS 27.2

EPSS0.00081