NetSight
high8.8

CVE-2021-39300

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code executio…

Impact

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Affected products

VendorProductAffected versions
HpZ1 Entry Tower G5 Workstation Firmware
before 02.12.00
HpZ1 Entry Tower G6 Workstation Firmware
before 02.10.00
HpZ1 G8 Tower Desktop Pc Firmware
before 02.07.00
HpZ4 G4 Workstation \(Core-X\) Firmware
before 02.75
HpZ4 G4 Workstation \(Xeon W\) Firmware
before 02.75
HpZ6 G4 Workstation Firmware
before 02.75
HpZ8 G4 Workstation Firmware
before 02.75
HpEngage Flex Mini Retail System Firmware
before 02.10.00
HpMp9 G4 Retail System Firmware
before 02.18.00
HpElite Dragonfly Firmware
before 01.12.00
HpElite Dragonfly G2 Firmware
before 01.08.00
HpElite Dragonfly Max Firmware
before 01.08.00

Weakness classification

References