CVEvulnerability

CVE-2021-39298

8.8 HIGH Published 2022-02-16 Modified 2026-10-07 Official page ↗
Status
Modified
Published
2022-02-16
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

Affected configurations

• hp z1 entry tower g5 workstation firmware (< 02.12.00) • hp z1 entry tower g6 workstation firmware (< 02.10.00) • hp z1 g8 tower desktop pc firmware (< 02.07.00) • hp z4 g4 workstation \(core-x\) firmware (< 02.75) • hp z4 g4 workstation \(xeon w\) firmware (< 02.75) • hp z6 g4 workstation firmware (< 02.75) • hp z8 g4 workstation firmware (< 02.75) • hp engage flex mini retail system firmware (< 02.10.00) • hp mp9 g4 retail system firmware (< 02.18.00) • hp elite dragonfly firmware (< 01.12.00) • hp elite dragonfly g2 firmware (< 01.08.00) • hp elite dragonfly max firmware (< 01.08.00) • hp elite x2 1013 g3 firmware (< 01.19.00) • hp elite x2 g4 firmware (< 01.12.00) • hp elite x2 g8 tablet firmware (< 01.08.00) • hp elitebook 1050 g1 firmware (< 01.19.00) • hp elitebook 830 g5 firmware (< 01.19.00) • hp elitebook 830 g6 firmware (< 01.12.00) • hp elitebook 830 g7 firmware (< 01.08.00) • hp elitebook 830 g8 firmware (< 01.08.00) • hp elitebook 836 g5 firmware (< 01.19.00) • hp elitebook 836 g6 firmware (< 01.12.00) • hp elitebook 840 aero g8 firmware (< 01.08.00) • hp elitebook 840 g5 firmware (< 01.19.00) • hp elitebook 840 g5 healthcare edition firmware (< 01.19.00) • hp elitebook 840 g6 firmware (< 01.12.00) • hp elitebook 840 g6 healthcare edition firmware (< 01.12.00) • hp elitebook 840 g7 firmware (< 01.08.00) • hp elitebook 840 g8 firmware (< 01.08.00) • hp elitebook 840r g4 firmware (< 01.19.00) • hp elitebook 846 g5 firmware (< 01.19.00) • hp elitebook 850 g5 firmware (< 01.19.00) • hp elitebook 850 g6 firmware (< 01.12.00) • hp elitebook 850 g7 firmware (< 01.08.00) • hp elitebook 850 g8 firmware (< 01.08.00) • hp elitebook x360 1030 g3 firmware (< 01.19.00) • hp elitebook x360 1030 g4 firmware (< 01.12.00) • hp elitebook x360 1030 g7 firmware (< 01.08.00) • hp elitebook x360 1030 g8 firmware (< 01.08.00) • hp elitebook x360 1040 g5 firmware (< 01.19.00) • hp elitebook x360 1040 g6 firmware (< 01.12.00) • hp elitebook x360 1040 g7 firmware (< 01.08.00) • hp elitebook x360 1040 g8 firmware (< 01.08.00) • hp elitebook x360 830 g5 firmware (< 01.19.00) • hp elitebook x360 830 g6 firmware (< 01.12.00) • hp elitebook x360 830 g7 firmware (< 01.08.00) • hp elitebook x360 830 g8 firmware (< 01.08.00) • hp probook 430 g5 firmware (< 01.19.00) • hp probook 430 g6 firmware (< 01.19.00) • hp probook 430 g7 firmware (< 01.12.00) • hp probook 430 g8 firmware (< 01.08.02) • hp probook 440 g5 firmware (< 01.19.00) • hp probook 440 g6 firmware (< 01.19.00) • hp probook 440 g7 firmware (< 01.12.00) • hp probook 440 g8 firmware (< 01.08.02) • hp probook 450 g5 firmware (< 01.19.00) • hp probook 450 g6 firmware (< 01.19.00) • hp probook 450 g7 firmware (< 01.12.00) • hp probook 450 g8 firmware (< 01.08.02) • hp probook 470 g5 firmware (< 01.19.00) … and 127 more

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References