CVE-2021-39301CWE-269privilege-escalation

CVE-2021-39301

High · published February 16, 2022

CVSS v3.1
8.8
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-02-16T22:15Z
Affected products (196)
ProductVersionsFixed in
hp/z1_entry_tower_g5_workstation_firmware< 02.12.0002.12.00
hp/z1_entry_tower_g6_workstation_firmware< 02.10.0002.10.00
hp/z1_g8_tower_desktop_pc_firmware< 02.07.0002.07.00
hp/z4_g4_workstation_\(core-x\)_firmware< 02.7502.75
hp/z4_g4_workstation_\(core-x\)_firmware< 02.7502.75
hp/z4_g4_workstation_\(core-x\)_firmware< 02.7502.75
hp/z4_g4_workstation_\(xeon_w\)_firmware< 02.7502.75
hp/z4_g4_workstation_\(xeon_w\)_firmware< 02.7502.75
hp/z4_g4_workstation_\(xeon_w\)_firmware< 02.7502.75
hp/z6_g4_workstation_firmware< 02.7502.75
hp/z6_g4_workstation_firmware< 02.7502.75
hp/z6_g4_workstation_firmware< 02.7502.75
hp/z8_g4_workstation_firmware< 02.7502.75
hp/z8_g4_workstation_firmware< 02.7502.75
hp/z8_g4_workstation_firmware< 02.7502.75
hp/engage_flex_mini_retail_system_firmware< 02.10.0002.10.00
hp/mp9_g4_retail_system_firmware< 02.18.0002.18.00
hp/elite_dragonfly_firmware< 01.12.0001.12.00
hp/elite_dragonfly_g2_firmware< 01.08.0001.08.00
hp/elite_dragonfly_max_firmware< 01.08.0001.08.00
hp/elite_x2_1013_g3_firmware< 01.19.0001.19.00
hp/elite_x2_g4_firmware< 01.12.0001.12.00
hp/elite_x2_g8_tablet_firmware< 01.08.0001.08.00
hp/elitebook_1050_g1_firmware< 01.19.0001.19.00
hp/elitebook_830_g5_firmware< 01.19.0001.19.00
hp/elitebook_830_g6_firmware< 01.12.0001.12.00
hp/elitebook_830_g7_firmware< 01.08.0001.08.00
hp/elitebook_830_g8_firmware< 01.08.0001.08.00
hp/elitebook_836_g5_firmware< 01.19.0001.19.00
hp/elitebook_836_g6_firmware< 01.12.0001.12.00
hp/elitebook_840_aero_g8_firmware< 01.08.0001.08.00
hp/elitebook_840_g5_firmware< 01.19.0001.19.00
hp/elitebook_840_g5_healthcare_edition_firmware< 01.19.0001.19.00
hp/elitebook_840_g6_firmware< 01.12.0001.12.00
hp/elitebook_840_g6_healthcare_edition_firmware< 01.12.0001.12.00
hp/elitebook_840_g7_firmware< 01.08.0001.08.00
hp/elitebook_840_g8_firmware< 01.08.0001.08.00
hp/elitebook_840r_g4_firmware< 01.19.0001.19.00
hp/elitebook_846_g5_firmware< 01.19.0001.19.00
hp/elitebook_850_g5_firmware< 01.19.0001.19.00
hp/elitebook_850_g6_firmware< 01.12.0001.12.00
hp/elitebook_850_g7_firmware< 01.08.0001.08.00
hp/elitebook_850_g8_firmware< 01.08.0001.08.00
hp/elitebook_x360_1030_g3_firmware< 01.19.0001.19.00
hp/elitebook_x360_1030_g4_firmware< 01.12.0001.12.00
hp/elitebook_x360_1030_g7_firmware< 01.08.0001.08.00
hp/elitebook_x360_1030_g8_firmware< 01.08.0001.08.00
hp/elitebook_x360_1040_g5_firmware< 01.19.0001.19.00
hp/elitebook_x360_1040_g6_firmware< 01.12.0001.12.00
hp/elitebook_x360_1040_g7_firmware< 01.08.0001.08.00
hp/elitebook_x360_1040_g8_firmware< 01.08.0001.08.00
hp/elitebook_x360_830_g5_firmware< 01.19.0001.19.00
hp/elitebook_x360_830_g6_firmware< 01.12.0001.12.00
hp/elitebook_x360_830_g7_firmware< 01.08.0001.08.00
hp/elitebook_x360_830_g8_firmware< 01.08.0001.08.00
hp/probook_430_g5_firmware< 01.19.0001.19.00
hp/probook_430_g6_firmware< 01.19.0001.19.00
hp/probook_430_g7_firmware< 01.12.0001.12.00
hp/probook_430_g8_firmware< 01.08.0201.08.02
hp/probook_440_g5_firmware< 01.19.0001.19.00
hp/probook_440_g6_firmware< 01.19.0001.19.00
hp/probook_440_g7_firmware< 01.12.0001.12.00
hp/probook_440_g8_firmware< 01.08.0201.08.02
hp/probook_450_g5_firmware< 01.19.0001.19.00
hp/probook_450_g6_firmware< 01.19.0001.19.00
hp/probook_450_g7_firmware< 01.12.0001.12.00
hp/probook_450_g8_firmware< 01.08.0201.08.02
hp/probook_470_g5_firmware< 01.19.0001.19.00
hp/probook_630_g8_firmware< 01.08.0101.08.01
hp/probook_640_g4_firmware< 01.19.0001.19.00
hp/probook_640_g5_firmware< 01.12.0001.12.00
hp/probook_640_g7_firmware< 01.08.0001.08.00
hp/probook_640_g8_firmware< 01.08.0101.08.01
hp/probook_650_g4_firmware< 01.19.0001.19.00
hp/probook_650_g5_firmware< 01.12.0001.12.00
hp/probook_650_g7_firmware< 01.08.0001.08.00
hp/probook_650_g8_firmware< 01.08.0101.08.01
hp/probook_x360_11_g3_education_edition_firmware< 01.18.0001.18.00
hp/probook_x360_11_g4_education_edition_firmware< 01.13.0001.13.00
hp/probook_x360_11_g5_education_edition_firmware< 01.09.0001.09.00
hp/probook_x360_11_g6_education_edition_firmware< 01.09.0001.09.00
hp/probook_x360_11_g7_education_edition_firmware< 01.08.0001.08.00
hp/probook_x360_440_g1_firmware< 01.19.0001.19.00
hp/zbook_14u_g5_firmware< 01.19.0001.19.00
hp/zbook_14u_g6_firmware< 01.12.0001.12.00
hp/zbook_15_g5_firmware< 01.19.0001.19.00
hp/zbook_15_g6_firmware< 01.12.0001.12.00
hp/zbook_15u_g5_firmware< 01.19.0001.19.00
hp/zbook_15u_g6_firmware< 01.12.0001.12.00
hp/zbook_17_g5_firmware< 01.19.0001.19.00
hp/zbook_17_g6_firmware< 01.12.0001.12.00
hp/zbook_create_g7_firmware< 01.08.0001.08.00
hp/zbook_firefly_14_g7_firmware< 01.08.0001.08.00
hp/zbook_firefly_14_g8_firmware< 01.08.0001.08.00
hp/zbook_firefly_15_g7_firmware< 01.08.0001.08.00
hp/zbook_firefly_15_g8_firmware< 01.08.0001.08.00
hp/zbook_fury_15_g7_firmware< 01.08.0001.08.00
hp/zbook_fury_15_g8_firmware< 01.08.0101.08.01
hp/zbook_fury_17_g7_firmware< 01.08.0001.08.00
hp/zbook_fury_17_g8_firmware< 01.08.0101.08.01
hp/zbook_power_15_g8_firmware< 01.08.0001.08.00
hp/zbook_power_g7_firmware< 01.08.0001.08.00
hp/zbook_studio_15_g8_firmware< 01.08.0001.08.00
hp/zbook_studio_g5_firmware< 01.19.0001.19.00
hp/zbook_studio_g7_firmware< 01.08.0001.08.00
hp/zbook_studio_x360_g5_firmware< 01.19.0001.19.00
hp/zhan_66_pro_13_g2_firmware< 01.19.0001.19.00
hp/zhan_66_pro_14_g2_firmware< 01.19.0001.19.00
hp/zhan_66_pro_14_g3_firmware< 01.12.0001.12.00
hp/zhan_66_pro_14_g4_firmware< 01.08.0201.08.02
hp/zhan_66_pro_15_g2_firmware< 01.19.0001.19.00
hp/zhan_66_pro_15_g3_firmware< 01.12.0001.12.00
hp/zhan_66_pro_g1_firmware< 01.19.0001.19.00
hp/zhan_x_13_g2_firmware< 01.12.0001.12.00
hp/260_g3_desktop_mini_pc_firmware≤ 2.17.00—
hp/elitedesk_800_35w_g4_desktop_mini_pc_firmware≤ 2.18.00—
hp/elitedesk_800_65w_g4_desktop_mini_pc_firmware≤ 2.18.00—
hp/elitedesk_800_95w_g4_desktop_mini_pc_firmware≤ 2.18.00—
hp/elitedesk_800_g4_small_form_factor_pc_firmware≤ 2.18.00—
hp/elitedesk_800_g4_tower_pc_firmware≤ 2.18.00—
hp/elitedesk_800_g4_tower_pc_firmware≤ 2.18.00—
hp/elitedesk_800_g4_workstation_edition_firmware≤ 2.18.00—
hp/elitedesk_800_g5_desktop_mini_pc_firmware≤ 2.12.00—
hp/elitedesk_800_g5_small_form_factor_pc_firmware≤ 2.12.00—
hp/elitedesk_800_g5_tower_pc_firmware≤ 2.12.00—
hp/elitedesk_800_g6_desktop_mini_pc_firmware≤ 2.10.00—
hp/elitedesk_800_g6_small_form_factor_pc_firmware≤ 2.10.00—
hp/elitedesk_800_g6_tower_pc_firmware≤ 2.10.00—
hp/elitedesk_800_g8_desktop_mini_pc_firmware≤ 2.07.00—
hp/elitedesk_800_g8_small_form_factor_pc_firmware≤ 2.07.00—
hp/elitedesk_800_g8_tower_pc_firmware≤ 2.07.00—
hp/elitedesk_805_g6_desktop_mini_pc_firmware≤ 2.07.00—
hp/elitedesk_805_g6_small_form_factor_pc_firmware≤ 2.07.00—
hp/elitedesk_805_g8_desktop_mini_pc_firmware≤ 2.03.00—
hp/elitedesk_805_g8_small_form_factor_pc_firmware≤ 2.03.00—
hp/elitedesk_880_g4_tower_pc_firmware≤ 2.18.00—
hp/elitedesk_880_g5_tower_pc_firmware≤ 2.12.00—
hp/elitedesk_880_g6_tower_pc_firmware≤ 2.10.00—
hp/elitedesk_880_g8_tower_pc_firmware≤ 2.07.00—
hp/eliteone_1000_g2_23.8-in_all-in-one_business_pc_firmware≤ 2.18.00—
hp/eliteone_1000_g2_23.8-in_touch_all-in-one_business_pc_firmware≤ 2.18.00—
hp/eliteone_1000_g2_27-in_4k_uhd_all-in-one_business_pc_firmware≤ 2.18.00—
hp/eliteone_1000_g2_34-in_curved_all-in-one_business_pc_firmware≤ 2.18.00—
hp/eliteone_800_g4_23.8-in_healthcare_edition_all-in-one_business_pc_firmware≤ 2.18.00—
hp/eliteone_800_g4_23.8-inch_non-touch_all-in-one_pc_firmware≤ 2.18.00—
hp/eliteone_800_g4_23.8-inch_non-touch_gpu_all-in-one_pc_firmware≤ 2.18.00—
hp/eliteone_800_g4_23.8-inch_touch_all-in-one_pc_firmware≤ 2.18.00—
hp/eliteone_800_g4_23.8-inch_touch_gpu_all-in-one_pc_firmware≤ 2.18.00—
hp/eliteone_800_g5_23.8-in_healthcare_edition_all-in-one_firmware≤ 2.12.00—
hp/eliteone_800_g5_23.8-inch_all-in-one_firmware≤ 2.12.00—
hp/eliteone_800_g6_24_all-in-one_pc_firmware≤ 2.10.00—
hp/eliteone_800_g6_27_all-in-one_pc_firmware≤ 2.10.00—
hp/eliteone_800_g8_24_all-in-one_pc_firmware≤ 2.07.00—
hp/eliteone_800_g8_27_all-in-one_pc_firmware≤ 2.07.00—
hp/prodesk_400_g4_desktop_mini_pc_firmware≤ 2.18.00—
hp/prodesk_400_g5_desktop_mini_pc_firmware≤ 2.12.00—
hp/prodesk_400_g5_microtower_pc_firmware≤ 2.18.00—
hp/prodesk_400_g5_small_form_factor_pc_firmware≤ 2.18.00—
hp/prodesk_400_g6_desktop_mini_pc_firmware≤ 2.10.00—
hp/prodesk_400_g6_microtower_pc_firmware≤ 2.12.00—
hp/prodesk_400_g6_small_form_factor_pc_firmware≤ 2.12.00—
hp/prodesk_400_g7_microtower_pc_firmware≤ 2.10.00—
hp/prodesk_400_g7_small_form_factor_pc_firmware≤ 2.10.00—
hp/prodesk_405_g8_desktop_mini_pc_firmware≤ 2.03.00—
hp/prodesk_405_g8_small_form_factor_pc_firmware≤ 2.03.00—
hp/prodesk_480_g5_microtower_pc_firmware≤ 2.18.00—
hp/prodesk_480_g6_microtower_pc_firmware≤ 2.12.00—
hp/prodesk_480_g7_pci_microtower_pc_firmware≤ 2.10.00—
hp/prodesk_600_g4_desktop_mini_pc_firmware≤ 2.18.00—
hp/prodesk_600_g4_microtower_pc_firmware≤ 2.18.00—
hp/prodesk_600_g4_microtower_pc\(with_pci_slot\)_firmware≤ 2.18.00—
hp/prodesk_600_g4_small_form_factor_pc_firmware≤ 2.18.00—
hp/prodesk_600_g5_desktop_mini_pc_firmware≤ 2.12.00—
hp/prodesk_600_g5_microtower_pc_firmware≤ 2.12.00—
hp/prodesk_600_g5_microtower_pc\(with_pci_slot\)_firmware≤ 2.12.00—
hp/prodesk_600_g5_small_form_factor_pc_firmware≤ 2.12.00—
hp/prodesk_600_g6_desktop_mini_pc_firmware≤ 2.10.00—
hp/prodesk_600_g6_microtower_pc_firmware≤ 2.10.00—
hp/prodesk_600_g6_small_form_factor_pc_firmware≤ 2.10.00—
hp/prodesk_680_g4_microtower_pc_firmware≤ 2.18.00—
hp/prodesk_680_g4_microtower_pc\(with_pci_slot\)_firmware≤ 2.18.00—
hp/prodesk_680_g6_pci_microtower_pc_firmware≤ 2.10.00—
hp/proone_400_g4_20-inch_non-touch_all-in-one_business_pc_firmware≤ 2.18.00—
hp/proone_400_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware≤ 2.18.00—
hp/proone_400_g5_20-inch_all-in-one_business_pc_firmware≤ 2.12.00—
hp/proone_400_g5_23.8-inch_all-in-one_business_pc_firmware≤ 2.12.00—
hp/proone_400_g6_20_all-in-one_pc_firmware≤ 2.10.00—
hp/proone_400_g6_24_all-in-one_pc_firmware≤ 2.10.00—
hp/proone_440_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware≤ 2.18.00—
hp/proone_440_g5_23.8-in_all-in-one_business_pc_firmware≤ 2.12.00—
hp/proone_440_g6_24_all-in-one_pc_firmware≤ 2.10.00—
hp/proone_600_g4_21.5-inch_touch_all-in-one_business_pc_firmware≤ 2.18.00—
hp/proone_600_g5_21.5-in_all-in-one_business_pc_firmware≤ 2.12.00—
hp/proone_600_g6_22_all-in-one_pc_firmware≤ 2.10.00—
hp/zhan_66_pro_g3_22_all-in-one_pc_firmware≤ 2.10.00—
hp/zhan_66_pro_g3_24_all-in-one_pc_firmware≤ 2.10.00—
References (2)
EPSS history
Timeline
  • 16 FEB 16:38Z
    Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code…
    cvelistv5