Read the docs
TI-2019-13634 Aliases CVE-2019-18913GHSA-55w2-94jr-cc63

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code…

Priority LOW 31Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).

Why it matters now

EPSS 0.00605 49th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard EnterpriseHP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.Depends on platform. Prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02.—No fix listedCNA
  • HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. VendorHewlett Packard Enterprise Affected Depends on platform. Prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02. Fixed in — No fix listed CNA

CPE configurations NVD · 66

CPEVersionsRoleVendor
cpe:2.3:o:hp:elitedesk_800_g5_dm_firmware:*:*:*:*:*:*:*:*before 02.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_g5_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_g5_sff_firmware:*:*:*:*:*:*:*:*before 02.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_g5_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitedesk_800_g5_twr_firmware:*:*:*:*:*:*:*:*before 02.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitedesk_800_g5_twr:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:eliteone_800_g5_aio_firmware:*:*:*:*:*:*:*:*before 02.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:eliteone_800_g5_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g5_dm_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g5_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 56 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:prodesk_400_g6_mt_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g6_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_400_g6_sff_firmware:*:*:*:*:*:*:*:*before 02.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_400_g6_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_480_g6_mt_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_480_g6_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g5_dm_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g5_dm:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g5_mt_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g5_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g5_pci_mt_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g5_pci_mt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:prodesk_600_g5_sff_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:prodesk_600_g5_sff:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_400_g5_aio_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_400_g5_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_440_g5_aio_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_440_g5_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:proone_600_g5_aio_firmware:*:*:*:*:*:*:*:*before 02.04.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:proone_600_g5_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_dragonfly_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_dragonfly:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elite_x2_g4_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elite_x2_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_830_g6_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_830_g6:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_836_g6_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_836_g6:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_840_g6_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g6:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_840_g6_healthcare_edition_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_840_g6_healthcare_edition:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_846_g6_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_846_g6:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_846_g6_healthcare_edition_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_846_g6_healthcare_edition:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_850_g6_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_850_g6:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_x360_1030_g4_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_x360_1030_g4:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_x360_1040_g6_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_x360_1040_g6:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:elitebook_x360_830_g6_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:elitebook_x360_830_g6:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_640_g5_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_640_g5:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:probook_650_g5_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:probook_650_g5:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_14u_g6_mobile_workstation_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_14u_g6_mobile_workstation:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_15u_g6_mobile_workstation_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_15u_g6_mobile_workstation:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zhan_x_13_g2_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zhan_x_13_g2:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:zbook_17u_g6_mobile_workstation_firmware:*:*:*:*:*:*:*:*before 01.04.02VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:zbook_17u_g6_mobile_workstation:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-18913
  2. 2026-10-03 Alias added: GHSA-55w2-94jr-cc63

References

Patch 1

  • TI-2021-16674 Improper privilege management in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS… CVSS 3.1HIGH 8.8
  • TI-2021-16673 Improper privilege management in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS… CVSS 3.1HIGH 8.8
  • TI-2021-16672 Improper privilege management in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS… CVSS 3.1HIGH 8.8
  • TI-2021-16671 Improper privilege management in AMD 2nd Gen EPYC CVSS 3.1HIGH 8.8
  • TI-2021-16670 Improper privilege management in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS… CVSS 3.1HIGH 8.8
  • TI-2022-13567 Incorrect authorization in Hewlett Packard Enterprise HP PC BIOS CVSS 3.1HIGH 7.8
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences