Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22887

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

Published

2021-03-16T16:15:14.037

Last Modified

2024-11-21T05:50:50.620

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 2.3 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-506
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System pulsesecure psa-5000_firmware - Yes
Hardware pulsesecure psa-5000 - No
Operating System pulsesecure psa-7000_firmware - Yes
Hardware pulsesecure psa-7000 - No
Operating System supermicro x10slh-f_firmware < 3.4 Yes
Hardware supermicro x10slh-f - No
Operating System supermicro x10sll-f_firmware < 3.4 Yes
Hardware supermicro x10sll-f - No
Operating System supermicro x10slm-f_firmware < 3.4 Yes
Hardware supermicro x10slm-f - No
Operating System supermicro x10sll\+f_firmware < 3.4 Yes
Hardware supermicro x10sll\+f - No
Operating System supermicro x10slm\+-f_firmware < 3.4 Yes
Hardware supermicro x10slm\+-f - No
Operating System supermicro x10slm\+ln4f_firmware < 3.4 Yes
Hardware supermicro x10slm\+ln4f - No
Operating System supermicro x10sla-f_firmware < 3.4 Yes
Hardware supermicro x10sla-f - No
Operating System supermicro x10sl7-f_firmware < 3.4 Yes
Hardware supermicro x10sl7-f - No
Operating System supermicro x10sll-s_firmware < 3.4 Yes
Hardware supermicro x10sll-s - No
Operating System supermicro x10sll-sf_firmware < 3.4 Yes
Hardware supermicro x10sll-sf - No
References