CVE-2019-16284

highpriority · track · 30EPSS 0.020 · 80 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.96% (80th) EPSS

CVSS 9 · high

Is it mine?

201 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

cvss

Technical severity, 0–10. One row per scoring source.

9.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–9

v2.09highAV:N/AC:L/Au:S/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8 · impact 10

v3.17.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.2 · impact 5.9

v3.17.2highAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.6mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20US

affected products (201)

Products and version ranges known to be affected.

HP Inc. Multiple - See https://support.hp.com/rs-en/document/c06456250≤ Multiple - See https://support.hp.com/rs-en/document/c06456250enisa_euvdEU
HP Inc. HP 260 G1 DM≤ 2.27fstec_bduRU
HP Inc. HP 280 Pro G1 Microtower PC≤ 80.3fstec_bduRU
HP Inc. HP 285 G2 Microtower Business PC≤ A0.23fstec_bduRU
HP Inc. HP 340 G3 Notebook PC≤ F.48fstec_bduRU
HP Inc. HP 340 G3 Notebook PC≤ HP 340 G4 Notebook PCfstec_bduRU
HP Inc. HP 340 G4 Notebook PC≤ F.55fstec_bduRU
HP Inc. HP 346 G3 Notebook PC≤ F.48fstec_bduRU
HP Inc. HP 346 G4 Notebook PC≤ F.46fstec_bduRU
HP Inc. HP 348 G3 Notebook PC≤ F.55fstec_bduRU
HP Inc. HP 348 G3 Notebook PC≤ F.48fstec_bduRU
HP Inc. HP Elite Slice≤ 2.42fstec_bduRU
HP Inc. HP Elite x2 1011 G1 Tablet≤ 1.42fstec_bduRU
HP Inc. HP Elite x2 1011 G1 Tablet≤ 1.27fstec_bduRU
HP Inc. HP EliteBook 1030 G1 Notebook≤ 1.42fstec_bduRU
HP Inc. HP EliteBook 1040 G2 Notebook PC≤ 1.17fstec_bduRU
HP Inc. HP EliteBook 720 G1 Notebook PC≤ 1.48fstec_bduRU
HP Inc. HP EliteBook 720 G2 Notebook PC≤ 1.29fstec_bduRU
HP Inc. HP EliteBook 740 G1 Notebook PC≤ 1.48fstec_bduRU
HP Inc. HP EliteBook 740 G2 Notebook PC≤ 1.29fstec_bduRU

showing 20 of 201

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2019-11-05modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan