CVE-2019-18913: hp inc. hp intel-based business pcs that support microsoft windows 10 kernel dma protection.
Vulnerability summary
CVE-2019-18913 is a high (CVSS 7.2) vulnerability in hp inc. hp intel-based business pcs that support microsoft windows 10 kernel dma protection.. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 48% of scored vulnerabilities.
Timeline
- 31-01-2020PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.60%
Chance of exploitation in the next 30 days
Percentile
48%
Versus all other CVEs
30-day change
0.00 pp
From 0.60% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Hp33 products
- elite_dragonfly_firmware< 01.04.02
- elite_x2_g4_firmware< 01.04.02
- elitebook_830_g6_firmware< 01.04.02
- elitebook_836_g6_firmware< 01.04.02
- elitebook_840_g6_firmware< 01.04.02
Hp inc.1 product
- hp intel-based business pcs that support microsoft windows 10 kernel dma protection.Depends on platform. Prior to 01.04.02 | or prior to 02.04.01 | or prior to 02.04.02.
2 vendors · 34 products