1. Home
  2. CVE Database
  3. CVE-2019-6322
MEDIUM · 6.8

CVE-2019-6322

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates ...

Vulnerability Description

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.

CVSS Score

6.8

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HpZ4 G4 Workstation Firmware< 1.70
HpZ4 G4 Workstation-
HpZ4 G4 Core-X Workstation Firmware< 1.70
HpZ4 G4 Core-X Workstation-
HpZ6 G4 Workstation Firmware< 1.71
HpZ6 G4 Workstation-
HpZ8 G4 Workstation Firmware< 1.71
HpZ8 G4 Workstation-

Related Weaknesses (CWE)

CWE-667

References

FAQ

What is CVE-2019-6322?

CVE-2019-6322 is a vulnerability with a CVSS score of 6.8 (MEDIUM). HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates ...

How severe is CVE-2019-6322?

CVE-2019-6322 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-6322?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Z4 G4 Workstation Firmware, Hp Z4 G4 Workstation, Hp Z4 G4 Core-X Workstation Firmware, Hp Z4 G4 Core-X Workstation, Hp Z6 G4 Workstation Firmware.