CVE-2019-16284
A potential security vulnerability has been identified in multiple HP products and versions which...
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.
- Record
CVE-2019-16284- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.
- Record
CVE-2019-16284- Updated
- 2026-11-02
EUVDEUVD-2019-7082 No score
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.
- Record
EUVD-2019-7082- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8x49-r627-jgw5 No score
A potential security vulnerability has been identified in multiple HP products and versions which...
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.
- Record
GHSA-8x49-r627-jgw5- Updated
- 2026-11-02
Affected products
- hp 260 g1 dm firmware
- hp 280 pro g1 firmware
- hp 285 g2 firmware
- hp 340 g3 firmware
- hp 340 g4 firmware
- hp 346 g3 firmware
- hp 346 g4 firmware
- hp 348 g3 firmware
- hp 348 g4 firmware
- hp elite slice firmware
- hp elite x2 1011 g1 firmware
- hp elite x2 1012 g1 firmware
Show 91 moreShow less
- hp elitebook 1030 g1 firmware
- hp elitebook 1040 g2 firmware
- hp elitebook 720 g1 firmware
- hp elitebook 720 g2 firmware
- hp elitebook 740 g1 firmware
- hp elitebook 740 g2 firmware
- hp elitebook 750 g1 firmware
- hp elitebook 750 g2 firmware
- hp elitebook 820 g1 firmware
- hp elitebook 820 g2 firmware
- hp elitebook 820 g3 firmware
- hp elitebook 828 g3 firmware
- hp elitebook 840 g1 firmware
- hp elitebook 840 g2 firmware
- hp elitebook 840 g3 firmware
- hp elitebook 848 g3 firmware
- hp elitebook 850 g1 firmware
- hp elitebook 850 g2 firmware
- hp elitebook 850 g3 firmware
- hp elitebook folio 1020 g1 firmware
- hp elitebook folio 1040 g1 firmware
- hp elitebook folio 1040 g3 firmware
- hp elitebook folio 9480m firmware
- hp elitebook folio g1 firmware
- hp elitebook revolve 810 g2 firmware
- hp elitebook revolve 810 g3 firmware
- hp elitedesk 800 g2 dm firmware
- hp elitedesk 800 g2 sff firmware
- hp elitedesk 800 g2 twr firmware
- hp eliteone 800 g2 aio firmware
- hp elitepad 1000 g2 firmware
- hp mp9 g2 retail system firmware
- hp pro tablet 10 ee g1 firmware
- hp pro tablet 608 g1 firmware
- hp pro tablet 610 g1 firmware
- hp pro x2 612 g1 firmware
- hp probook 11 g1 firmware
- hp probook 11 g2 firmware
- hp probook 430 g1 firmware
- hp probook 430 g2 firmware
- hp probook 430 g3 firmware
- hp probook 440 g1 firmware
- hp probook 440 g2 firmware
- hp probook 440 g3 firmware
- hp probook 450 g1 firmware
- hp probook 450 g2 firmware
- hp probook 450 g3 firmware
- hp probook 470 g1 firmware
- hp probook 470 g2 firmware
- hp probook 470 g3 firmware
- hp probook 640 g1 firmware
- hp probook 640 g2 firmware
- hp probook 650 g1 firmware
- hp probook 650 g2 firmware
- hp probook x360 11 g1 firmware
- hp prodesk 400 g1 dm firmware
- hp prodesk 400 g2.5 sff firmware
- hp prodesk 400 g2 dm firmware
- hp prodesk 400 g3 sff firmware
- hp prodesk 405 g2 mt firmware
- hp prodesk 480 g3 sff firmware
- hp prodesk 485 g2 mt firmware
- hp prodesk 490 g2 mt firmware
- hp prodesk 490 g3 sff firmware
- hp prodesk 498 g2 mt firmware
- hp prodesk 498 g3 sff firmware
- hp prodesk 600 g2 dm firmware
- hp prodesk 600 g2 sff firmware
- hp proone 400 g2 aio firmware
- hp proone 600 g2 aio firmware
- hp rp2 retail system firmware
- hp rp9 g1 retail system 9015 firmware
- hp rp9 g1 retail system 9018 firmware
- hp sprout pro firmware
- hp z1 g3 firmware
- hp z238 microtower firmware
- hp z240 sff firmware
- hp z240 tower firmware
- hp z2 mini g3 firmware
- hp zbook 14 firmware
- hp zbook 14 g2 firmware
- hp zbook 15 firmware
- hp zbook 15 g2 firmware
- hp zbook 15 g3 firmware
- hp zbook 15u g2 firmware
- hp zbook 15u g3 firmware
- hp zbook 17 firmware
- hp zbook 17 g2 firmware
- hp zbook 17 g3 firmware
- hp zbook studio g3 firmware
- hp inc. multiple - see https://support.hp.com/rs-en/document/c06456250
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-16284 is a high vulnerability (CVSS 7.2) in Hp 260 G1 Dm Firmware, published November 5, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.96%, the 80th percentile. No source names a fixed version.