vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-18913

MEDIUM
6.8
CVSS Score
Published: January 31, 2020 at 03:04 AM UTC
Updated: June 17, 2026 at 02:25 AM UTC
67 products affected across 1 vendorElitebook 850 G6 FirmwareElitebook 840 G6 FirmwareProbook 640 G5 Firmware

Using HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. by HP Inc.?

Get instant alerts when new vulnerabilities affect HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.8
Exploit prediction
EPSS 0.6%

Description

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Elite Dragonfly Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elite-dragonfly (same device)
Elite X2 G4 Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elite-x2-g4 (same device)
Elitebook 830 G6 Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-830-g6 (same device)
Elitebook 836 G6 Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-836-g6 (same device)
Elitebook 840 G6 Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-840-g6 (same device)
Elitebook 840 G6 Healthcare Edition Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-840-g6-healthcare-edition (same device)
Elitebook 846 G6 Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-846-g6 (same device)
Elitebook 846 G6 Healthcare Edition Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-846-g6-healthcare-edition (same device)
Elitebook 850 G6 Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-850-g6 (same device)
Elitebook X360 1030 G4 Firmware· HP
95%
v < 1.04.02
Affected range stops below 1.04.02, so it looks safe — our inference, not a vendor statement
hp-elitebook-x360-1030-g4 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://support.hp.com/us-en/document/c06549501

CVSS

6.8MEDIUM[email protected]
Attack Vector
PHYSICAL
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card