CVEvulnerability

CVE-2021-22887

2.3 LOW Published 2021-03-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.3 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-506

Description

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

Affected configurations

• pulsesecure psa-5000 firmware • pulsesecure psa-7000 firmware • supermicro x10slh-f firmware (< 3.4) • supermicro x10sll-f firmware (< 3.4) • supermicro x10slm-f firmware (< 3.4) • supermicro x10sll\+f firmware (< 3.4) • supermicro x10slm\+-f firmware (< 3.4) • supermicro x10slm\+ln4f firmware (< 3.4) • supermicro x10sla-f firmware (< 3.4) • supermicro x10sl7-f firmware (< 3.4) • supermicro x10sll-s firmware (< 3.4) • supermicro x10sll-sf firmware (< 3.4)

Related

Weakness · CWE (1)

  • CWE-506 Embedded Malicious Code weakness

References