2.3

CVE-2021-22887

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pulsesecure ≫ Psa-5000 Firmware Version-
   Pulsesecure ≫ Psa-5000 Version-
Pulsesecure ≫ Psa-7000 Firmware Version-
   Pulsesecure ≫ Psa-7000 Version-
Supermicro ≫ X10slh-f Firmware Version < 3.4
   Supermicro ≫ X10slh-f Version-
Supermicro ≫ X10sll-f Firmware Version < 3.4
   Supermicro ≫ X10sll-f Version-
Supermicro ≫ X10slm-f Firmware Version < 3.4
   Supermicro ≫ X10slm-f Version-
Supermicro ≫ X10sll+f Firmware Version < 3.4
   Supermicro ≫ X10sll+f Version-
Supermicro ≫ X10slm+-f Firmware Version < 3.4
   Supermicro ≫ X10slm+-f Version-
Supermicro ≫ X10slm+ln4f Firmware Version < 3.4
   Supermicro ≫ X10slm+ln4f Version-
Supermicro ≫ X10sla-f Firmware Version < 3.4
   Supermicro ≫ X10sla-f Version-
Supermicro ≫ X10sl7-f Firmware Version < 3.4
   Supermicro ≫ X10sl7-f Version-
Supermicro ≫ X10sll-s Firmware Version < 3.4
   Supermicro ≫ X10sll-s Version-
Supermicro ≫ X10sll-sf Firmware Version < 3.4
   Supermicro ≫ X10sll-sf Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.158
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.3 0.8 1.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
CWE-506 Embedded Malicious Code

The product contains code that appears to be malicious in nature.