CVE-2019-6321

EUVD-2019-15886 · Published May 29, 2019

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.

Technologies

Hp Z4 G4 Core-X Workstation FirmwareHp Z8 G4 WorkstationHp Z8 G4 Workstation FirmwareHp Z6 G4 WorkstationHp Z6 G4 Workstation FirmwareHp Z4 G4 WorkstationHp Z4 G4 Core-X WorkstationHp Z4 G4 Workstation Firmware

Weaknesses

CWE-667

CVSS scores

v3.07.2CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
v2.09.0AV:N/AC:L/Au:S/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Impact

T1190Exploit Public-Facing Application T1499.004Application or System Exploitation

References

https://support.hp.com/us-en/document/c06318199

Potentially impacted assets

See if this affects your attack surface