Skip to content
Fencer Vulns
medium 6.8

CVE-2019-18913 json

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks.

published 2020-01-31 6 y ago modified 2026-06-17 4 mo ago also EUVD-2019-8591

cvss
6.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 49%
public exploits
0
none known

Summary

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).

Patch / fix

  • hp elitedesk_800_g5_dm_firmware 02.04.02
  • hp elitedesk_800_g5_sff_firmware 02.04.02
  • hp elitedesk_800_g5_twr_firmware 02.04.02
  • hp eliteone_800_g5_aio_firmware 02.04.02
  • hp prodesk_400_g5_dm_firmware 02.04.01
  • hp prodesk_400_g6_mt_firmware 02.04.01
  • hp prodesk_400_g6_sff_firmware 02.04.02
  • hp prodesk_480_g6_mt_firmware 02.04.01
  • hp prodesk_600_g5_dm_firmware 02.04.01
  • hp prodesk_600_g5_mt_firmware 02.04.01
  • hp prodesk_600_g5_pci_mt_firmware 02.04.01
  • hp prodesk_600_g5_sff_firmware 02.04.01
  • hp proone_400_g5_aio_firmware 02.04.01
  • hp proone_440_g5_aio_firmware 02.04.01
  • hp proone_600_g5_aio_firmware 02.04.01
  • hp elite_dragonfly_firmware 01.04.02
  • hp elite_x2_g4_firmware 01.04.02
  • hp elitebook_830_g6_firmware 01.04.02
  • hp elitebook_836_g6_firmware 01.04.02
  • hp elitebook_840_g6_firmware 01.04.02

Exploit prediction

0.60% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • HP Inc. HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.