CVE-2021-22887

2021-03-1615:04:37

CWE-506

hackerone

www.cve.org

vulnerability

pulse secure

psa-series hardware

bios

compromise

firmware

attack chain

exploit

device

AI Score

4.1

Confidence

High

EPSS

Percentile

12.6%

JSON

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

CNA Affected

[
  {
    "product": "PSA5000, PSA7000",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 3.0d"
      }
    ]
  }
]