1. Home
  2. CVE Database
  3. CVE-2019-6321
HIGH · 7.2

CVE-2019-6321

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates ...

Vulnerability Description

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.

CVSS Score

7.2

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HpZ4 G4 Workstation Firmware< 1.70
HpZ4 G4 Workstation-
HpZ4 G4 Core-X Workstation Firmware< 1.70
HpZ4 G4 Core-X Workstation-
HpZ6 G4 Workstation Firmware< 1.71
HpZ6 G4 Workstation-
HpZ8 G4 Workstation Firmware< 1.71
HpZ8 G4 Workstation-

Related Weaknesses (CWE)

CWE-667

References

FAQ

What is CVE-2019-6321?

CVE-2019-6321 is a vulnerability with a CVSS score of 7.2 (HIGH). HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates ...

How severe is CVE-2019-6321?

CVE-2019-6321 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-6321?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Z4 G4 Workstation Firmware, Hp Z4 G4 Workstation, Hp Z4 G4 Core-X Workstation Firmware, Hp Z4 G4 Core-X Workstation, Hp Z6 G4 Workstation Firmware.