CVEvulnerability
CVE-2021-39299
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-02-16
- Last modified
- 2026-10-07
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Affected configurations
• hp elite dragonfly firmware (< 01.12.00)
• hp elite dragonfly g2 firmware (< 01.08.00)
• hp elite dragonfly max firmware (< 01.08.00)
• hp elite x2 1013 g3 firmware (< 01.19.00)
• hp elite x2 g4 firmware (< 01.12.00)
• hp elite x2 g8 tablet firmware (< 01.08.00)
• hp elitebook 1050 g1 firmware (< 01.19.00)
• hp elitebook 830 g5 firmware (< 01.19.00)
• hp elitebook 830 g6 firmware (< 01.12.00)
• hp elitebook 830 g7 firmware (< 01.08.00)
• hp elitebook 830 g8 firmware (< 01.08.00)
• hp elitebook 836 g5 firmware (< 01.19.00)
• hp elitebook 836 g6 firmware (< 01.12.00)
• hp elitebook 840 aero g8 firmware (< 01.08.00)
• hp elitebook 840 g5 firmware (< 01.19.00)
• hp elitebook 840 g5 healthcare edition firmware (< 01.19.00)
• hp elitebook 840 g6 firmware (< 01.12.00)
• hp elitebook 840 g6 healthcare edition firmware (< 01.12.00)
• hp elitebook 840 g7 firmware (< 01.08.00)
• hp elitebook 840 g8 firmware (< 01.08.00)
• hp elitebook 840r g4 firmware (< 01.19.00)
• hp elitebook 846 g5 firmware (< 01.19.00)
• hp elitebook 850 g5 firmware (< 01.19.00)
• hp elitebook 850 g6 firmware (< 01.12.00)
• hp elitebook 850 g7 firmware (< 01.08.00)
• hp elitebook 850 g8 firmware (< 01.08.00)
• hp elitebook x360 1030 g3 firmware (< 01.19.00)
• hp elitebook x360 1030 g4 firmware (< 01.12.00)
• hp elitebook x360 1030 g7 firmware (< 01.08.00)
• hp elitebook x360 1030 g8 firmware (< 01.08.00)
• hp elitebook x360 1040 g5 firmware (< 01.19.00)
• hp elitebook x360 1040 g6 firmware (< 01.12.00)
• hp elitebook x360 1040 g7 firmware (< 01.08.00)
• hp elitebook x360 1040 g8 firmware (< 01.08.00)
• hp elitebook x360 830 g5 firmware (< 01.19.00)
• hp elitebook x360 830 g6 firmware (< 01.12.00)
• hp elitebook x360 830 g7 firmware (< 01.08.00)
• hp elitebook x360 830 g8 firmware (< 01.08.00)
• hp probook 430 g5 firmware (< 01.19.00)
• hp probook 430 g6 firmware (< 01.19.00)
• hp probook 430 g7 firmware (< 01.12.00)
• hp probook 430 g8 firmware (< 01.08.02)
• hp probook 440 g5 firmware (< 01.19.00)
• hp probook 440 g6 firmware (< 01.19.00)
• hp probook 440 g7 firmware (< 01.12.00)
• hp probook 440 g8 firmware (< 01.08.02)
• hp probook 450 g5 firmware (< 01.19.00)
• hp probook 450 g6 firmware (< 01.19.00)
• hp probook 450 g7 firmware (< 01.12.00)
• hp probook 450 g8 firmware (< 01.08.02)
• hp probook 470 g5 firmware (< 01.19.00)
• hp probook 630 g8 firmware (< 01.08.01)
• hp probook 640 g4 firmware (< 01.19.00)
• hp probook 640 g5 firmware (< 01.12.00)
• hp probook 640 g7 firmware (< 01.08.00)
• hp probook 640 g8 firmware (< 01.08.01)
• hp probook 650 g4 firmware (< 01.19.00)
• hp probook 650 g5 firmware (< 01.12.00)
• hp probook 650 g7 firmware (< 01.08.00)
• hp probook 650 g8 firmware (< 01.08.01)
… and 127 more
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://support.hp.com/us-en/document/ish_5661066-5661090-16 Patch, Vendor Advisory
- https://support.hp.com/us-en/document/ish_5661066-5661090-16 Patch, Vendor Advisory