Attacker Value
Unknown
0
CVE-2021-39297
0
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2021-39297
(Last updated October 07, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
MITRE ATT&CK
Select the MITRE ATT&CK Tactics that apply to this CVE
Collection
Select any Techniques used:
Command and Control
Select any Techniques used:
Credential Access
Select any Techniques used:
Defense Evasion
Select any Techniques used:
Discovery
Select any Techniques used:
Execution
Select any Techniques used:
Exfiltration
Select any Techniques used:
Impact
Select any Techniques used:
Initial Access
Select any Techniques used:
Lateral Movement
Select any Techniques used:
Persistence
Select any Techniques used:
Privilege Escalation
Select any Techniques used:
Topic Tags
Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)
What makes this of high-value to an attacker?
What makes this of low-value to an attacker?
Description
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
8.8 High
Impact Score:
6
Exploitability Score:
2
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Changed
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 01.12.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 01.08.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 01.19.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 01.08.02
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 01.08.01
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 02.17.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 02.18.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 02.12.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 02.10.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 02.07.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 02.03.00
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 02.75
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS before 2.58
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown
Vendors
Products
- 260 g3 desktop mini pc firmware,
- elite dragonfly firmware,
- elite dragonfly g2 firmware,
- elite dragonfly max firmware,
- elite x2 1013 g3 firmware,
- elite x2 g4 firmware,
- elite x2 g8 tablet firmware,
- elitebook 1050 g1 firmware,
- elitebook 830 g5 firmware,
- elitebook 830 g6 firmware,
- elitebook 830 g7 firmware,
- elitebook 830 g8 firmware,
- elitebook 836 g5 firmware,
- elitebook 836 g6 firmware,
- elitebook 840 aero g8 firmware,
- elitebook 840 g5 firmware,
- elitebook 840 g5 healthcare edition firmware,
- elitebook 840 g6 firmware,
- elitebook 840 g6 healthcare edition firmware,
- elitebook 840 g7 firmware,
- elitebook 840 g8 firmware,
- elitebook 840r g4 firmware,
- elitebook 846 g5 firmware,
- elitebook 850 g5 firmware,
- elitebook 850 g6 firmware,
- elitebook 850 g7 firmware,
- elitebook 850 g8 firmware,
- elitebook x360 1030 g3 firmware,
- elitebook x360 1030 g4 firmware,
- elitebook x360 1030 g7 firmware,
- elitebook x360 1030 g8 firmware,
- elitebook x360 1040 g5 firmware,
- elitebook x360 1040 g6 firmware,
- elitebook x360 1040 g7 firmware,
- elitebook x360 1040 g8 firmware,
- elitebook x360 830 g5 firmware,
- elitebook x360 830 g6 firmware,
- elitebook x360 830 g7 firmware,
- elitebook x360 830 g8 firmware,
- elitedesk 800 35w g4 desktop mini pc firmware,
- elitedesk 800 65w g4 desktop mini pc firmware,
- elitedesk 800 95w g4 desktop mini pc firmware,
- elitedesk 800 g4 small form factor pc firmware,
- elitedesk 800 g4 tower pc firmware,
- elitedesk 800 g4 workstation edition firmware,
- elitedesk 800 g5 desktop mini pc firmware,
- elitedesk 800 g5 small form factor pc firmware,
- elitedesk 800 g5 tower pc firmware,
- elitedesk 800 g6 desktop mini pc firmware,
- elitedesk 800 g6 small form factor pc firmware,
- elitedesk 800 g6 tower pc firmware,
- elitedesk 800 g8 desktop mini pc firmware,
- elitedesk 800 g8 small form factor pc firmware,
- elitedesk 800 g8 tower pc firmware,
- elitedesk 805 g6 desktop mini pc firmware,
- elitedesk 805 g6 small form factor pc firmware,
- elitedesk 805 g8 desktop mini pc firmware,
- elitedesk 805 g8 small form factor pc firmware,
- elitedesk 880 g4 tower pc firmware,
- elitedesk 880 g5 tower pc firmware,
- elitedesk 880 g6 tower pc firmware,
- elitedesk 880 g8 tower pc firmware,
- eliteone 1000 g2 23.8-in all-in-one business pc firmware,
- eliteone 1000 g2 23.8-in touch all-in-one business pc firmware,
- eliteone 1000 g2 27-in 4k uhd all-in-one business pc firmware,
- eliteone 1000 g2 34-in curved all-in-one business pc firmware,
- eliteone 800 g4 23.8-in healthcare edition all-in-one business pc firmware,
- eliteone 800 g4 23.8-inch non-touch all-in-one pc firmware,
- eliteone 800 g4 23.8-inch non-touch gpu all-in-one pc firmware,
- eliteone 800 g4 23.8-inch touch all-in-one pc firmware,
- eliteone 800 g4 23.8-inch touch gpu all-in-one pc firmware,
- eliteone 800 g5 23.8-in healthcare edition all-in-one firmware,
- eliteone 800 g5 23.8-inch all-in-one firmware,
- eliteone 800 g6 24 all-in-one pc firmware,
- eliteone 800 g6 27 all-in-one pc firmware,
- eliteone 800 g8 24 all-in-one pc firmware,
- eliteone 800 g8 27 all-in-one pc firmware,
- engage flex mini retail system firmware,
- mp9 g4 retail system firmware,
- probook 430 g5 firmware,
- probook 430 g6 firmware,
- probook 430 g7 firmware,
- probook 430 g8 firmware,
- probook 440 g5 firmware,
- probook 440 g6 firmware,
- probook 440 g7 firmware,
- probook 440 g8 firmware,
- probook 450 g5 firmware,
- probook 450 g6 firmware,
- probook 450 g7 firmware,
- probook 450 g8 firmware,
- probook 470 g5 firmware,
- probook 630 g8 firmware,
- probook 640 g4 firmware,
- probook 640 g5 firmware,
- probook 640 g7 firmware,
- probook 640 g8 firmware,
- probook 650 g4 firmware,
- probook 650 g5 firmware,
- probook 650 g7 firmware,
- probook 650 g8 firmware,
- probook x360 11 g3 education edition firmware,
- probook x360 11 g4 education edition firmware,
- probook x360 11 g5 education edition firmware,
- probook x360 11 g6 education edition firmware,
- probook x360 11 g7 education edition firmware,
- probook x360 440 g1 firmware,
- prodesk 400 g4 desktop mini pc firmware,
- prodesk 400 g5 desktop mini pc firmware,
- prodesk 400 g5 microtower pc firmware,
- prodesk 400 g5 small form factor pc firmware,
- prodesk 400 g6 desktop mini pc firmware,
- prodesk 400 g6 microtower pc firmware,
- prodesk 400 g6 small form factor pc firmware,
- prodesk 400 g7 microtower pc firmware,
- prodesk 400 g7 small form factor pc firmware,
- prodesk 405 g8 desktop mini pc firmware,
- prodesk 405 g8 small form factor pc firmware,
- prodesk 480 g5 microtower pc firmware,
- prodesk 480 g6 microtower pc firmware,
- prodesk 480 g7 pci microtower pc firmware,
- prodesk 600 g4 desktop mini pc firmware,
- prodesk 600 g4 microtower pc firmware,
- prodesk 600 g4 microtower pc(with pci slot) firmware,
- prodesk 600 g4 small form factor pc firmware,
- prodesk 600 g5 desktop mini pc firmware,
- prodesk 600 g5 microtower pc firmware,
- prodesk 600 g5 microtower pc(with pci slot) firmware,
- prodesk 600 g5 small form factor pc firmware,
- prodesk 600 g6 desktop mini pc firmware,
- prodesk 600 g6 microtower pc firmware,
- prodesk 600 g6 small form factor pc firmware,
- prodesk 680 g4 microtower pc firmware,
- prodesk 680 g4 microtower pc(with pci slot) firmware,
- prodesk 680 g6 pci microtower pc firmware,
- proone 400 g4 20-inch non-touch all-in-one business pc firmware,
- proone 400 g4 23.8-inch non-touch all-in-one business pc firmware,
- proone 400 g5 20-inch all-in-one business pc firmware,
- proone 400 g5 23.8-inch all-in-one business pc firmware,
- proone 400 g6 20 all-in-one pc firmware,
- proone 400 g6 24 all-in-one pc firmware,
- proone 440 g4 23.8-inch non-touch all-in-one business pc firmware,
- proone 440 g5 23.8-in all-in-one business pc firmware,
- proone 440 g6 24 all-in-one pc firmware,
- proone 600 g4 21.5-inch touch all-in-one business pc firmware,
- proone 600 g5 21.5-in all-in-one business pc firmware,
- proone 600 g6 22 all-in-one pc firmware,
- z1 entry tower g5 workstation firmware,
- z1 entry tower g6 workstation firmware,
- z1 g8 tower desktop pc firmware,
- z4 g4 workstation (core-x) firmware,
- z4 g4 workstation (xeon w) firmware,
- z6 g4 workstation firmware,
- z8 g4 workstation firmware,
- zbook 14u g5 firmware,
- zbook 14u g6 firmware,
- zbook 15 g5 firmware,
- zbook 15 g6 firmware,
- zbook 15u g5 firmware,
- zbook 15u g6 firmware,
- zbook 17 g5 firmware,
- zbook 17 g6 firmware,
- zbook create g7 firmware,
- zbook firefly 14 g7 firmware,
- zbook firefly 14 g8 firmware,
- zbook firefly 15 g7 firmware,
- zbook firefly 15 g8 firmware,
- zbook fury 15 g7 firmware,
- zbook fury 15 g8 firmware,
- zbook fury 17 g7 firmware,
- zbook fury 17 g8 firmware,
- zbook power 15 g8 firmware,
- zbook power g7 firmware,
- zbook studio 15 g8 firmware,
- zbook studio g5 firmware,
- zbook studio g7 firmware,
- zbook studio x360 g5 firmware,
- zhan 66 pro 13 g2 firmware,
- zhan 66 pro 14 g2 firmware,
- zhan 66 pro 14 g3 firmware,
- zhan 66 pro 14 g4 firmware,
- zhan 66 pro 15 g2 firmware,
- zhan 66 pro 15 g3 firmware,
- zhan 66 pro g1 firmware,
- zhan 66 pro g3 22 all-in-one pc firmware,
- zhan 66 pro g3 24 all-in-one pc firmware,
- zhan x 13 g2 firmware
References
Additional Info
Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Rapid7
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below: