CVE-2019-6321

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
hpCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
VendorProductVersion
hpz4_g4_workstation_firmware
𝑥
< 1.70
hpz4_g4_core-x_workstation_firmware
𝑥
< 1.70
hpz6_g4_workstation_firmware
𝑥
< 1.71
hpz8_g4_workstation_firmware
𝑥
< 1.71
hpz4_g4_workstation_firmware
𝑥
< 1.70
hpz4_g4_core-x_workstation_firmware
𝑥
< 1.70
hpz6_g4_workstation_firmware
𝑥
< 1.71
hpz8_g4_workstation_firmware
𝑥
< 1.71
𝑥
= Vulnerable software versions