Vulnerabilities > CVE-2021-22887

CVSS 2.1 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

local

low complexity

pulsesecure

supermicro

NVD

Published: 2021-03-16

Updated: 2021-03-22

Summary

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

Vulnerable Configurations

Part	Description	Count
OS	Pulsesecure Pulsesecure PSA 5000 Firmware - Pulsesecure PSA 7000 Firmware -	2
OS	Supermicro Supermicro X10Slh F Firmware * Supermicro X10Sll F Firmware * Supermicro X10Slm F Firmware * Supermicro X10Sll+F Firmware * Supermicro X10Slm+ F Firmware * Supermicro X10Slm+Ln4F Firmware * Supermicro X10Sla F Firmware * Supermicro X10Sl7 F Firmware * Supermicro X10Sll S Firmware * Supermicro X10Sll SF Firmware *	10
Hardware	Pulsesecure Pulsesecure PSA 5000 - Pulsesecure PSA 7000 -	2
Hardware	Supermicro Supermicro X10Slh F - Supermicro X10Sll F - Supermicro X10Slm F - Supermicro X10Sll+F - Supermicro X10Slm+ F - Supermicro X10Slm+Ln4F - Supermicro X10Sla F - Supermicro X10Sl7 F - Supermicro X10Sll S - Supermicro X10Sll SF -	10

Vulnerabilities > CVE-2021-22887 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-22887"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2021-22887