Medium severity · published Jan 31, 2020
CVE-2019-18913
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks
6.8
CVSS
0.6%
EPSS
No
On KEV
Description
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Elite Dragonfly Firmware · HP
before 01.04.02 · source: NVD
EX
Elite X2 G4 Firmware · HP
before 01.04.02 · source: NVD
E8
Elitebook 830 G6 Firmware · HP
before 01.04.02 · source: NVD
E8
Elitebook 836 G6 Firmware · HP
before 01.04.02 · source: NVD
E8
Elitebook 840 G6 Firmware · HP
before 01.04.02 · source: NVD
E8
Elitebook 840 G6 Healthcare Edition Firmware · HP
before 01.04.02 · source: NVD
E8
Elitebook 846 G6 Firmware · HP
before 01.04.02 · source: NVD
E8
Elitebook 846 G6 Healthcare Edition Firmware · HP
before 01.04.02 · source: NVD
E8
Elitebook 850 G6 Firmware · HP
before 01.04.02 · source: NVD
EX
Elitebook X360 1030 G4 Firmware · HP
before 01.04.02 · source: NVD
EX
Elitebook X360 1040 G6 Firmware · HP
before 01.04.02 · source: NVD
EX
Elitebook X360 830 G6 Firmware · HP
before 01.04.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-18913
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-18913
Patch
https://support.hp.com/us-en/document/c06549501
More from Elite Dragonfly Firmware
8.8
CVE-2021-39300
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution
8.8
CVE-2021-39299
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution
8.8
CVE-2021-39301
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution
8.8
CVE-2021-39298
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution…
7.8
CVE-2022-27540
A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial…