CVEvulnerability
CVE-2021-38489
8.2 HIGH
Official page ↗
- Status
- Undergoing Analysis
- Published
- 2026-09-03
- Last modified
- 2026-09-03
- Assigner
- 8338d8cb-57f7-4252-abc0-96fd13e98d21
- CVSS 3.1 (8338d8cb-57f7-4252-abc0-96fd13e98d21)
- 8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-256
Description
HDD password plaintext is stored in a UEFI variable.
Related
Weakness · CWE (1)
- CWE-256 Plaintext Storage of a Password weakness
References
- https://www.insyde.com/security-pledge/sa-2022025/ www.insyde.com