CVE Vulnerabilities

CVE-2021-22887

Embedded Malicious Code

Published: Mar 16, 2021 | Modified: Nov 21, 2024
CVSS 3.x
2.3
LOW
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

Weakness

The product contains code that appears to be malicious in nature.

Affected Software

Name Vendor Start Version End Version
Psa-5000_firmware Pulsesecure - (including) - (including)

Potential Mitigations

References