Read the docs
TI-2019-12258 Aliases CVE-2019-16284GHSA-8x49-r627-jgw5

A potential security vulnerability has been identified in multiple HP products and…

Priority LOW 36Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

Why it matters now

EPSS 0.01959 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard EnterpriseMultiple - See https://support.hp.com/rs-en/document/c06456250Multiple - See https://support.hp.com/rs-en/document/c06456250—No fix listedCNA
  • Multiple - See https://support.hp.com/rs-en/document/c06456250 VendorHewlett Packard Enterprise Affected Multiple - See https://support.hp.com/rs-en/document/c06456250 Fixed in — No fix listed CNA

CPE configurations NVD · 206

CPEVersionsRoleVendor
cpe:2.3:o:hp:260_g1_dm_firmware:*:*:*:*:*:*:*:*before 2.27VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:260_g1_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:280_pro_g1_firmware:*:*:*:*:*:*:*:*before 80.3VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:280_pro_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:285_g2_firmware:*:*:*:*:*:*:*:*before a0.23VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:285_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:340_g3_firmware:*:*:*:*:*:*:*:*before f.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:340_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:340_g4_firmware:*:*:*:*:*:*:*:*before f.55VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:340_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 196 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:346_g3_firmware:*:*:*:*:*:*:*:*before f.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:346_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:346_g4_firmware:*:*:*:*:*:*:*:*before f.46VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:346_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:348_g3_firmware:*:*:*:*:*:*:*:*before f.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:348_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:348_g4_firmware:*:*:*:*:*:*:*:*before f.55VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:348_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_slice_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_slice:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_x2_1011_g1_firmware:*:*:*:*:*:*:*:*before 1.27VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_x2_1011_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_x2_1012_g1_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_x2_1012_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1030_g1_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1030_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_1040_g2_firmware:*:*:*:*:*:*:*:*before 1.17VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_1040_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_720_g1__firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_720_g1_:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_720_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_720_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_740_g1_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_740_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_740_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_740_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_750_g1_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_750_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_750_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_750_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_820_g1_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_820_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_820_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_820_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_820_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_828_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_840_g1_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_840_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_840_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_848_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_850_g1_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_850_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_850_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_850_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_850_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_1020_g1_firmware:*:*:*:*:-:*:*:*before 1.24VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_1020_g1:-:*:*:*:-:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_1020_g1_firmware:*:*:*:*:special:*:*:*before 1.24VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_1020_g1:-:*:*:*:special:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_1040_g1_firmware:*:*:*:*:*:*:*:*before 1.44VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_1040_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_1040_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_1040_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_9480m_firmware:*:*:*:*:*:*:*:*before 1.49VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_9480m:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_folio_g1_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_revolve_810_g2_firmware:*:*:*:*:*:*:*:*before 1.45VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_revolve_810_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_revolve_810_g3_firmware:*:*:*:*:*:*:*:*before 1.2VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_revolve_810_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_g2_dm_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_g2_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_g2_sff_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_g2_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_g2_twr_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_g2_twr:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:eliteone_800_g2_aio_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:eliteone_800_g2_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitepad_1000_g2_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitepad_1000_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:mp9_g2_retail_system_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:mp9_g2_retail_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pro_tablet_10_ee_g1_firmware:*:*:*:*:*:*:*:*before 1.31VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pro_tablet_10_ee_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pro_tablet_608_g1_firmware:*:*:*:*:*:*:*:*before 1.21VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pro_tablet_608_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pro_tablet_610_g1_firmware:*:*:*:*:*:*:*:*before f.16VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pro_tablet_610_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pro_x2_612_g1_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pro_x2_612_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_11_g1_firmware:*:*:*:*:education:*:*:*before 1.17VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_11_g1:-:*:*:*:education:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_11_g2_firmware:*:*:*:*:education:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_11_g2:-:*:*:*:education:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_430_g1_firmware:*:*:*:*:*:*:*:*before 1.49VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_430_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_430_g2_firmware:*:*:*:*:*:*:*:*before 1.52VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_430_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_430_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_430_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_440_g1_firmware:*:*:*:*:*:*:*:*before 1.49VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_440_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_440_g2_firmware:*:*:*:*:*:*:*:*before 1.52VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_440_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_440_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_450_g1_firmware:*:*:*:*:*:*:*:*before 1.49VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_450_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_450_g2_firmware:*:*:*:*:*:*:*:*before 1.52VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_450_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_450_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_450_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_470_g1_firmware:*:*:*:*:*:*:*:*before 1.49VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_470_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_470_g2_firmware:*:*:*:*:*:*:*:*before 1.52VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_470_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_470_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_640_g1_firmware:*:*:*:*:*:*:*:*before 1.49VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_640_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_640_g2_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_650_g1_firmware:*:*:*:*:*:*:*:*before 1.49VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_650_g1:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_650_g2_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_x360_11_g1_firmware:*:*:*:*:education:*:*:*before 1.3VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_x360_11_g1:-:*:*:*:education:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g1_dm_firmware:*:*:*:*:*:*:*:*before 2.27VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g1_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g2_dm_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g2_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g2.5_sff_firmware:*:*:*:*:*:*:*:*before 2.26VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g2.5_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g3_sff_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g3_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_405_g2_mt_firmware:*:*:*:*:*:*:*:*before 2.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_405_g2_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_485_g2_mt_firmware:*:*:*:*:*:*:*:*before 2.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_485_g2_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_480_g3_sff_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_480_g3_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_490_g2_mt_firmware:*:*:*:*:*:*:*:*before 2.31VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_490_g2_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_490_g3_sff_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_490_g3_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_498_g2_mt_firmware:*:*:*:*:*:*:*:*before 2.31VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_498_g2_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_498_g3_sff_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_498_g3_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g2_dm_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g2_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g2_sff_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g2_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_400_g2_aio_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_400_g2_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_600_g2_aio_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_600_g2_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:rp2_retail_system_firmware:*:*:*:*:*:*:*:*before 2.21VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:rp2_retail_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:rp9_g1_retail_system_9015_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:rp9_g1_retail_system_9015:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:rp9_g1_retail_system_9018_firmware:*:*:*:*:*:*:*:*before 2.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:rp9_g1_retail_system_9018:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_14_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_14_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_14_firmware:*:*:*:*:*:*:*:*before 1.48VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_14:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15_g2_firmware:*:*:*:*:*:*:*:*before 1.25VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15_firmware:*:*:*:*:*:*:*:*before 1.46VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15u_g2_firmware:*:*:*:*:*:*:*:*before 1.29VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15u_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15u_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_17_g2_firmware:*:*:*:*:*:*:*:*before 1.25VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_17_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_17_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_17_firmware:*:*:*:*:*:*:*:*before 1.46VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_17:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_studio_g3_firmware:*:*:*:*:*:*:*:*before 1.42VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z1_g3_firmware:*:*:*:*:*:*:*:*before 1.26VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z1_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z2_mini_g3_firmware:*:*:*:*:*:*:*:*before 1.77VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z2_mini_g3:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z238_microtower_firmware:*:*:*:*:*:*:*:*before 1.77VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z238_microtower:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z240_sff_firmware:*:*:*:*:*:*:*:*before 1.77VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z240_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:z240_tower_firmware:*:*:*:*:*:*:*:*before 1.77VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:z240_tower:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:sprout_pro_firmware:*:*:*:*:*:*:*:*before a0.14VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:sprout_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-16284
  2. 2026-10-03 Alias added: GHSA-8x49-r627-jgw5

References

Sources