CVEvulnerability

CVE-2021-39300

8.8 HIGH Published 2022-02-16 Modified 2026-10-07 Official page ↗
Status
Modified
Published
2022-02-16
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Affected configurations

• hp z1 entry tower g5 workstation firmware (< 02.12.00) • hp z1 entry tower g6 workstation firmware (< 02.10.00) • hp z1 g8 tower desktop pc firmware (< 02.07.00) • hp z4 g4 workstation \(core-x\) firmware (< 02.75) • hp z4 g4 workstation \(xeon w\) firmware (< 02.75) • hp z6 g4 workstation firmware (< 02.75) • hp z8 g4 workstation firmware (< 02.75) • hp engage flex mini retail system firmware (< 02.10.00) • hp mp9 g4 retail system firmware (< 02.18.00) • hp elite dragonfly firmware (< 01.12.00) • hp elite dragonfly g2 firmware (< 01.08.00) • hp elite dragonfly max firmware (< 01.08.00) • hp elite x2 1013 g3 firmware (< 01.19.00) • hp elite x2 g4 firmware (< 01.12.00) • hp elite x2 g8 tablet firmware (< 01.08.00) • hp elitebook 1050 g1 firmware (< 01.19.00) • hp elitebook 830 g5 firmware (< 01.19.00) • hp elitebook 830 g6 firmware (< 01.12.00) • hp elitebook 830 g7 firmware (< 01.08.00) • hp elitebook 830 g8 firmware (< 01.08.00) • hp elitebook 836 g5 firmware (< 01.19.00) • hp elitebook 836 g6 firmware (< 01.12.00) • hp elitebook 840 aero g8 firmware (< 01.08.00) • hp elitebook 840 g5 firmware (< 01.19.00) • hp elitebook 840 g5 healthcare edition firmware (< 01.19.00) • hp elitebook 840 g6 firmware (< 01.12.00) • hp elitebook 840 g6 healthcare edition firmware (< 01.12.00) • hp elitebook 840 g7 firmware (< 01.08.00) • hp elitebook 840 g8 firmware (< 01.08.00) • hp elitebook 840r g4 firmware (< 01.19.00) • hp elitebook 846 g5 firmware (< 01.19.00) • hp elitebook 850 g5 firmware (< 01.19.00) • hp elitebook 850 g6 firmware (< 01.12.00) • hp elitebook 850 g7 firmware (< 01.08.00) • hp elitebook 850 g8 firmware (< 01.08.00) • hp elitebook x360 1030 g3 firmware (< 01.19.00) • hp elitebook x360 1030 g4 firmware (< 01.12.00) • hp elitebook x360 1030 g7 firmware (< 01.08.00) • hp elitebook x360 1030 g8 firmware (< 01.08.00) • hp elitebook x360 1040 g5 firmware (< 01.19.00) • hp elitebook x360 1040 g6 firmware (< 01.12.00) • hp elitebook x360 1040 g7 firmware (< 01.08.00) • hp elitebook x360 1040 g8 firmware (< 01.08.00) • hp elitebook x360 830 g5 firmware (< 01.19.00) • hp elitebook x360 830 g6 firmware (< 01.12.00) • hp elitebook x360 830 g7 firmware (< 01.08.00) • hp elitebook x360 830 g8 firmware (< 01.08.00) • hp probook 430 g5 firmware (< 01.19.00) • hp probook 430 g6 firmware (< 01.19.00) • hp probook 430 g7 firmware (< 01.12.00) • hp probook 430 g8 firmware (< 01.08.02) • hp probook 440 g5 firmware (< 01.19.00) • hp probook 440 g6 firmware (< 01.19.00) • hp probook 440 g7 firmware (< 01.12.00) • hp probook 440 g8 firmware (< 01.08.02) • hp probook 450 g5 firmware (< 01.19.00) • hp probook 450 g6 firmware (< 01.19.00) • hp probook 450 g7 firmware (< 01.12.00) • hp probook 450 g8 firmware (< 01.08.02) • hp probook 470 g5 firmware (< 01.19.00) … and 127 more

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References