CVE-2019-18913 Security feature bypass in HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.
Attackers with physical access can bypass Kernel DMA protection to execute unauthorized UEFI code on HP Intel-based Business PCs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18913?
CVE-2019-18913 is a medium-severity vulnerability in HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection., published on 31 Jan 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
Which versions are affected by CVE-2019-18913?
It affects 33 products.
Products include Hp Elite Dragonfly Firmware, Hp Elite X2 G4 Firmware, Hp Elitebook 830 G6 Firmware, Hp Elitebook 836 G6 Firmware, Hp Elitebook 840 G6 Firmware, Hp Elitebook 840 G6 Healthcare Edition Firmware and 27 more.
How do I fix CVE-2019-18913?
No fix has been published for CVE-2019-18913 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-18913 being exploited?
There is no known exploitation of CVE-2019-18913 in the wild and no public exploit code.
Other vulnerabilities in HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.
Sources
Also known as GHSA-55w2-94jr-cc63.