Low severity · published Mar 16, 2021
CVE-2021-22887
A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware
2.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Psa-5000 Firmware · Pulsesecure
All versions, or not specified · source: NVD
PF
Psa-7000 Firmware · Pulsesecure
All versions, or not specified · source: NVD
XF
X10sl7-f Firmware · Supermicro
before 3.4 · source: NVD
XF
X10sla-f Firmware · Supermicro
before 3.4 · source: NVD
XF
X10slh-f Firmware · Supermicro
before 3.4 · source: NVD
XF
X10sll+f Firmware · Supermicro
before 3.4 · source: NVD
XF
X10sll-f Firmware · Supermicro
before 3.4 · source: NVD
XF
X10sll-s Firmware · Supermicro
before 3.4 · source: NVD
XF
X10sll-sf Firmware · Supermicro
before 3.4 · source: NVD
XF
X10slm+-f Firmware · Supermicro
before 3.4 · source: NVD
XF
X10slm+ln4f Firmware · Supermicro
before 3.4 · source: NVD
XF
X10slm-f Firmware · Supermicro
before 3.4 · source: NVD