CVE-2019-6321

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-6321
HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://support.hp.com/us-en/document/c06318199 Patch Vendor Advisory
https://support.hp.com/us-en/document/c06318199 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:linux:*:*
cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:linux:*:*
cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:linux:*:*
cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:linux:*:*
cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2019-05-29 20:29

Updated : 2024-11-21 04:46

NVD link : CVE-2019-6321

Mitre link : CVE-2019-6321

CVE.ORG link : CVE-2019-6321

JSON object : View

Products Affected

hp

  • z4_g4_workstation_firmware
  • z4_g4_core-x_workstation
  • z8_g4_workstation_firmware
  • z8_g4_workstation
  • z4_g4_workstation
  • z6_g4_workstation
  • z6_g4_workstation_firmware
  • z4_g4_core-x_workstation_firmware
CWE
CWE-667

Improper Locking