CVE-2019-16284 - CVE House
Back to Database
Status published High CVE-2019-16284

A potential security vulnerability has been identified in multiple HP...

Vulnerability Description

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16284

Credits & Attribution

No credits recorded in the NVD database.

References

More from HP Inc.

View All →
CVE-2025-43489
Poly Clariti Manager - Multiple Security Vulnerabilities
Low 2
CVE-2025-43488
Poly Clariti Manager - Multiple Security Vulnerabilities
Low 2
CVE-2025-43487
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium 6.9
CVE-2025-43486
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium 5.7
CVE-2025-43485
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium 5.7

Affected Vendor

Affected Software

Multiple - See https://support.hp.com/rs-en/document/c06456250
Vulnerable Versions:
Multiple - See https://support.hp.com/rs-en/document/c06456250

Timeline

Official Publish: November 5th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.