{"id":"CVE-2019-16284","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-16284","generatedAt":"2026-10-27T23:27:28.183Z","title":"A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege.","description":"A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.","published":"2019-11-05T21:15:13.000Z","lastModified":"2026-06-17T02:22:04.000Z","status":"Modified","sourceIdentifier":"hp-security-alert@hp.com","cvss":{"version":"3.1","score":7.2,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["hp/260 g1 dm firmware","hp/280 pro g1 firmware","hp/285 g2 firmware","hp/340 g3 firmware","hp/340 g4 firmware","hp/346 g3 firmware","hp/346 g4 firmware","hp/348 g3 firmware","hp/348 g4 firmware","hp/elite slice firmware","hp/elite x2 1011 g1 firmware","hp/elite x2 1012 g1 firmware","hp/elitebook 1030 g1 firmware","hp/elitebook 1040 g2 firmware","hp/elitebook 720 g1  firmware","hp/elitebook 720 g2 firmware","hp/elitebook 740 g1 firmware","hp/elitebook 740 g2 firmware","hp/elitebook 750 g1 firmware","hp/elitebook 750 g2 firmware","hp/elitebook 820 g1 firmware","hp/elitebook 820 g2 firmware","hp/elitebook 820 g3 firmware","hp/elitebook 828 g3 firmware","hp/elitebook 840 g1 firmware","hp/elitebook 840 g2 firmware","hp/elitebook 840 g3 firmware","hp/elitebook 848 g3 firmware","hp/elitebook 850 g1 firmware","hp/elitebook 850 g2 firmware","hp/elitebook 850 g3 firmware","hp/elitebook folio 1020 g1 firmware","hp/elitebook folio 1040 g1 firmware","hp/elitebook folio 1040 g3 firmware","hp/elitebook folio 9480m firmware","hp/elitebook folio g1 firmware","hp/elitebook revolve 810 g2 firmware","hp/elitebook revolve 810 g3 firmware","hp/elitedesk 800 g2 dm firmware","hp/elitedesk 800 g2 sff firmware","hp/elitedesk 800 g2 twr firmware","hp/eliteone 800 g2 aio firmware","hp/elitepad 1000 g2 firmware","hp/mp9 g2 retail system firmware","hp/pro tablet 10 ee g1 firmware","hp/pro tablet 608 g1 firmware","hp/pro tablet 610 g1 firmware","hp/pro x2 612 g1 firmware","hp/probook 11 g1 firmware","hp/probook 11 g2 firmware","hp/probook 430 g1 firmware","hp/probook 430 g2 firmware","hp/probook 430 g3 firmware","hp/probook 440 g1 firmware","hp/probook 440 g2 firmware","hp/probook 440 g3 firmware","hp/probook 450 g1 firmware","hp/probook 450 g2 firmware","hp/probook 450 g3 firmware","hp/probook 470 g1 firmware"],"epss":{"score":0.01959,"percentile":0.80163,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://support.hp.com/rs-en/document/c06456250","tags":["Vendor Advisory"],"source":"hp-security-alert@hp.com"},{"url":"https://support.hp.com/rs-en/document/c06456250","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-16284","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}