CVE-2019-18913
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution...
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
- Record
CVE-2019-18913- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
- Record
CVE-2019-18913- Updated
- 2026-11-02
EUVDEUVD-2019-8591 No score
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
- Record
EUVD-2019-8591- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-55w2-94jr-cc63 No score
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution...
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
- Record
GHSA-55w2-94jr-cc63- Updated
- 2026-11-02
Affected products
- hp inc. intel-based business pcs that support microsoft windows 10 kernel dma protection.
- hp elite dragonfly firmware
- hp elite x2 g4 firmware
- hp elitebook 830 g6 firmware
- hp elitebook 836 g6 firmware
- hp elitebook 840 g6 firmware
- hp elitebook 840 g6 healthcare edition firmware
- hp elitebook 846 g6 firmware
- hp elitebook 846 g6 healthcare edition firmware
- hp elitebook 850 g6 firmware
- hp elitebook x360 1030 g4 firmware
- hp elitebook x360 1040 g6 firmware
Show 22 moreShow less
- hp elitebook x360 830 g6 firmware
- hp elitedesk 800 g5 dm firmware
- hp elitedesk 800 g5 sff firmware
- hp elitedesk 800 g5 twr firmware
- hp eliteone 800 g5 aio firmware
- hp probook 640 g5 firmware
- hp probook 650 g5 firmware
- hp prodesk 400 g5 dm firmware
- hp prodesk 400 g6 mt firmware
- hp prodesk 400 g6 sff firmware
- hp prodesk 480 g6 mt firmware
- hp prodesk 600 g5 dm firmware
- hp prodesk 600 g5 mt firmware
- hp prodesk 600 g5 pci mt firmware
- hp prodesk 600 g5 sff firmware
- hp proone 400 g5 aio firmware
- hp proone 440 g5 aio firmware
- hp proone 600 g5 aio firmware
- hp zbook 14u g6 mobile workstation firmware
- hp zbook 15u g6 mobile workstation firmware
- hp zbook 17u g6 mobile workstation firmware
- hp zhan x 13 g2 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-18913 is a medium vulnerability (CVSS 6.8) in Hp Inc. Intel-based Business Pcs That Support Microsoft Windows 10 Kernel Dma Protection., published January 31, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 49th percentile. No source names a fixed version.