CVE-2019-6322
Status: ModifiedMedium (6.8)—
HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.
CVSS
- Version: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- Base score: 6.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.21%
- Percentile among all scored CVEs: 68
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (4)
CWEs
- CWE-667
References
Raw JSON (NVD)
Show
{
"id": "CVE-2019-6322",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"authentication": "SINGLE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.9
}
]
},
"affected": [
{
"source": "hp-security-alert@hp.com",
"affectedData": [
{
"vendor": "n/a",
"product": "HP Z4 G4 Workstation (Xeon W)",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z4 G4 Workstation (Xeon W) (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z4 G4 Core-X Workstation",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z4 G4 Core-X Workstation (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.70"
}
]
},
{
"vendor": "n/a",
"product": "HP Z6 G4 Workstation",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
},
{
"vendor": "n/a",
"product": "HP Z6 G4 Workstation (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
},
{
"vendor": "n/a",
"product": "HP Z8 G4 Workstation",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
},
{
"vendor": "n/a",
"product": "HP Z8 G4 Workstation (Linux)",
"versions": [
{
"status": "affected",
"version": "before 1.71"
}
]
}
]
}
],
"published": "2019-05-29T20:29:00.377",
"references": [
{
"url": "https://support.hp.com/us-en/document/c06318199",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "hp-security-alert@hp.com"
},
{
"url": "https://support.hp.com/us-en/document/c06318199",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default."
},
{
"lang": "es",
"value": "HP ha econtado una vulnerabilidad de seguridad con algunas versiones de Workstation BIOS (UEFI Firmware), donde el tiempo de ejecución del código BIOS podría ser manipulado si el TPM está deshabilitado. Esta vulnerabilidad esta relacionada con Workstations cuyo TPM está habilitado por defecto."
}
],
"lastModified": "2026-06-17T02:38:59.037",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D705A2F2-BDF8-4ACB-B682-E9EB26D5558F",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7A880C4-65EC-4D4C-9F31-68AFD4BE79C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61D5EEEF-309C-4A67-9395-4D96B0D96859",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A49133ED-9C3F-400D-972E-23FAB43B7B25"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71022F3C-5A46-467C-88EF-3B24B97F5516",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DD26B60-086E-4C83-B3EB-CA4981AAAF7C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26F06BE0-00B1-4216-B4ED-42837F3F1AD2",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "068354B9-5842-4014-A466-011FA1AA62B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "66FA358A-3EE5-4440-BB90-034051564C5B",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7A880C4-65EC-4D4C-9F31-68AFD4BE79C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z4_g4_core-x_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "A5C7B2C1-5F0B-4AB5-B6DE-673B5ED5ED52",
"versionEndExcluding": "1.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z4_g4_core-x_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A49133ED-9C3F-400D-972E-23FAB43B7B25"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z6_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C80EFB03-1270-49B1-AD2D-0F217AD2CD0E",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z6_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DD26B60-086E-4C83-B3EB-CA4981AAAF7C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:z8_g4_workstation_firmware:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "421AD855-EE9B-4BA8-92B7-2A1AAD2E041F",
"versionEndExcluding": "1.71"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:z8_g4_workstation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "068354B9-5842-4014-A466-011FA1AA62B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "hp-security-alert@hp.com"
}