CVE-2019-6322
Estado: ModificadaMedia (6.8)—
HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.21%
- Percentil entre todas las CVEs puntuadas: 68
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-667
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-6322",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"authentication": "SINGLE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.9
}
]
},
"affected": [
{
"source": "hp-security-alert@hp.com",
"affectedData": [
{
"vendor": "n/a",
"product": "HP Z4 G4 Workstation (Xeon W)",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z4 G4 Workstation (Xeon W) (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z4 G4 Core-X Workstation",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z4 G4 Core-X Workstation (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z6 G4 Workstation",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
},
{
"vendor": "n/a",
"product": "HP Z6 G4 Workstation (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
},
{
"vendor": "n/a",
"product": "HP Z8 G4 Workstation",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
},
{
"vendor": "n/a",
"product": "HP Z8 G4 Workstation (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
}
]
}
],
"published": "2019-05-29T20:29:00.377",
"references": [
{
"url": "https://support.hp.com/us-en/document/c06318199",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "hp-security-alert@hp.com"
},
{
"url": "https://support.hp.com/us-en/document/c06318199",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default."
},
{
"lang": "es",
"value": "HP ha econtado una vulnerabilidad de seguridad con algunas versiones de Workstation BIOS (UEFI Firmware), donde el tiempo de ejecución del código BIOS podría ser manipulado si el TPM está deshabilitado. Esta vulnerabilidad esta relacionada con Workstations cuyo TPM está habilitado por defecto."
}
],
"lastModified": "2026-06-17T02:38:59.037",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D705A2F2-BDF8-4ACB-B682-E9EB26D5558F",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7A880C4-65EC-4D4C-9F31-68AFD4BE79C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61D5EEEF-309C-4A67-9395-4D96B0D96859",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A49133ED-9C3F-400D-972E-23FAB43B7B25"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71022F3C-5A46-467C-88EF-3B24B97F5516",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DD26B60-086E-4C83-B3EB-CA4981AAAF7C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26F06BE0-00B1-4216-B4ED-42837F3F1AD2",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "068354B9-5842-4014-A466-011FA1AA62B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "66FA358A-3EE5-4440-BB90-034051564C5B",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7A880C4-65EC-4D4C-9F31-68AFD4BE79C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "A5C7B2C1-5F0B-4AB5-B6DE-673B5ED5ED52",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A49133ED-9C3F-400D-972E-23FAB43B7B25"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C80EFB03-1270-49B1-AD2D-0F217AD2CD0E",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DD26B60-086E-4C83-B3EB-CA4981AAAF7C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "421AD855-EE9B-4BA8-92B7-2A1AAD2E041F",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "068354B9-5842-4014-A466-011FA1AA62B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "hp-security-alert@hp.com"
}