CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
12.6%
A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.
Vendor | Product | Version | CPE |
---|---|---|---|
pulsesecure | psa-5000_firmware | - | cpe:2.3:o:pulsesecure:psa-5000_firmware:-:*:*:*:*:*:*:* |
pulsesecure | psa-5000 | - | cpe:2.3:h:pulsesecure:psa-5000:-:*:*:*:*:*:*:* |
pulsesecure | psa-7000_firmware | - | cpe:2.3:o:pulsesecure:psa-7000_firmware:-:*:*:*:*:*:*:* |
pulsesecure | psa-7000 | - | cpe:2.3:h:pulsesecure:psa-7000:-:*:*:*:*:*:*:* |
supermicro | x10slh-f_firmware | * | cpe:2.3:o:supermicro:x10slh-f_firmware:*:*:*:*:*:*:*:* |
supermicro | x10slh-f | - | cpe:2.3:h:supermicro:x10slh-f:-:*:*:*:*:*:*:* |
supermicro | x10sll-f_firmware | * | cpe:2.3:o:supermicro:x10sll-f_firmware:*:*:*:*:*:*:*:* |
supermicro | x10sll-f | - | cpe:2.3:h:supermicro:x10sll-f:-:*:*:*:*:*:*:* |
supermicro | x10slm-f_firmware | * | cpe:2.3:o:supermicro:x10slm-f_firmware:*:*:*:*:*:*:*:* |
supermicro | x10slm-f | - | cpe:2.3:h:supermicro:x10slm-f:-:*:*:*:*:*:*:* |
[
{
"product": "PSA5000, PSA7000",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in 3.0d"
}
]
}
]
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
12.6%