{"id":"CVE-2019-6322","aliases":["EUVD-2019-15887","GHSA-j6mg-246j-c9j2"],"status":"published","title":"HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware)...","description":"HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.","severity":{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01213,"percentile":0.68719,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-667"],"published":"2019-05-29T19:56:26Z","modified":"2026-06-17T02:38:59Z","products":[{"vendor":"hp","product":"z4_g4_core-x_workstation_firmware"},{"vendor":"hp","product":"z4_g4_workstation_firmware"},{"vendor":"hp","product":"z6_g4_workstation_firmware"},{"vendor":"hp","product":"z8_g4_workstation_firmware"}],"references":[{"url":"https://support.hp.com/us-en/document/c06318199","tags":["vendor-advisory","x_refsource_HP","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6322"},{"url":"https://github.com/advisories/GHSA-j6mg-246j-c9j2"}],"sources":{"cve":[{"id":"CVE-2019-6322","description":"HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.","status":"published","published":"2019-05-29T19:56:26Z","modified":"2024-08-04T20:16:24.814Z","updated_at":"2026-11-02T14:20:23.381621Z"}],"euvd":[{"id":"EUVD-2019-15887","description":"HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.","status":"published","published":"2019-05-29T19:56:26Z","modified":"2024-08-04T20:16:24Z","updated_at":"2026-11-03T03:06:49.204502Z"}],"ghsa":[{"id":"GHSA-j6mg-246j-c9j2","title":"HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware)...","description":"HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.","status":"published","published":"2022-05-24T16:46:51Z","modified":"2024-04-04T00:49:35Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:55:52.162148Z"}],"nvd":[{"id":"CVE-2019-6322","description":"HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.","status":"published","published":"2019-05-29T20:29:00.377Z","modified":"2026-06-17T02:38:59.037Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:05:14.729983Z"}]}}