CVE-2021-38576

2022-01-0321:07:45

TianoCore

www.cve.org

bios bug

pc model

firmware

platform authorization

tpm

dos

EPSS

0.001

Percentile

37.4%

JSON

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.

CNA Affected

[
  {
    "product": "EDK II",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "edk2-stable202105, edk2-stable202102, edk2-stable202011, edk2-stable202008, edk2-stable202005, edk2-stable202002, edk2-stable201911, edk2-stable201908, edk2-stable201905, edk2-stable201903, edk2-stable201811, edk2-stable201808"
      }
    ]
  }
]

References

bugzilla.tianocore.org/show_bug.cgi?id=3499

EPSS

0.001

Percentile

37.4%

JSON

Related for CVELIST:CVE-2021-38576