CVE Vulnerability

CVE-2021-22887

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

2.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

2.3 /10

CVSS v3.0 : LOW

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.supermicro.com/en/support/security/Trickbot Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44712 Patch Vendor Advisory
Configurations

Configuration 1
Information

Published : 2021-03-16 04:15

Updated : 2021-03-22 07:43

NVD link : CVE-2021-22887

Mitre link : CVE-2021-22887

Products Affected

Supermicro

X10slm-f Firmware

CWE
NVD-CWE-Other