ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-39297

—
CVSS 3.1
8.8 high
EPSS
<1%p37
Published
()
Modified
Description

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Vendors
hp
Products
260 g3 desktop mini pc firmware, elitedesk 800 35w g4 desktop mini pc firmware, elitedesk 800 65w g4 desktop mini pc firmware, elitedesk 800 95w g4 desktop mini pc firmware, elitedesk 800 g4 small form factor pc firmware, elitedesk 800 g4 tower pc firmware, elitedesk 800 g4 workstation edition firmware, elitedesk 800 g5 desktop mini pc firmware, elitedesk 800 g5 small form factor pc firmware, elitedesk 800 g5 tower pc firmware, elitedesk 800 g6 desktop mini pc firmware, elitedesk 800 g6 small form factor pc firmware
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news