Search/CVE-2021-39301
● CVE — High

CVE-2021-39301

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
0.44%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Connections
25 relationships
z6 g4 workstation firmware
source
z8 g4 workstation firmware
source
elite dragonfly firmware
source
elite x2 g4 firmware
source
elitebook 830 g6 firmware
source
elitebook 836 g6 firmware
source
elite dragonfly g2 firmware
source
elite dragonfly max firmware
source
elite x2 1013 g3 firmware
source
elite x2 g8 tablet firmware
source
elitebook 1050 g1 firmware
source
elitebook 830 g5 firmware
source
elitebook 830 g7 firmware
source
elitebook 830 g8 firmware
source
elitebook 836 g5 firmware
source
elitebook 840 aero g8 firmware
source
elitebook 840 g5 firmware
source
elitebook 840 g5 healthcare edition firmware
source
engage flex mini retail system firmware
source
mp9 g4 retail system firmware
source
z1 entry tower g5 workstation firmware
source
z1 entry tower g6 workstation firmware
source
z1 g8 tower desktop pc firmware
source
z4 g4 workstation (core-x) firmware
source
z4 g4 workstation (xeon w) firmware
source
Timeline
disclosure → media coverage
Feb 16, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024