CVE-2019-6321
Published May 29, 2019
Last updated 4 years ago
Overview
- Description
- HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.
- Source
- hp-security-alert@hp.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 5.9
- Exploitability score
- 1.2
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 9
- Impact score
- 10
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-667
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D705A2F2-BDF8-4ACB-B682-E9EB26D5558F",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7A880C4-65EC-4D4C-9F31-68AFD4BE79C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61D5EEEF-309C-4A67-9395-4D96B0D96859",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A49133ED-9C3F-400D-972E-23FAB43B7B25"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71022F3C-5A46-467C-88EF-3B24B97F5516",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DD26B60-086E-4C83-B3EB-CA4981AAAF7C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26F06BE0-00B1-4216-B4ED-42837F3F1AD2",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "068354B9-5842-4014-A466-011FA1AA62B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "66FA358A-3EE5-4440-BB90-034051564C5B",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7A880C4-65EC-4D4C-9F31-68AFD4BE79C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "A5C7B2C1-5F0B-4AB5-B6DE-673B5ED5ED52",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A49133ED-9C3F-400D-972E-23FAB43B7B25"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C80EFB03-1270-49B1-AD2D-0F217AD2CD0E",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DD26B60-086E-4C83-B3EB-CA4981AAAF7C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "421AD855-EE9B-4BA8-92B7-2A1AAD2E041F",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "068354B9-5842-4014-A466-011FA1AA62B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]