What is the CVSS score of CVE-2021-22887?

CVE-2021-22887 has a CVSS 3.1 base score of 2.3 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2021-22887?

Yes, a patch is available for CVE-2021-22887. Update the affected software to the latest version immediately.

Psa 5000 Firmware CVE-2021-22887

LOW

Embedded Malicious Code (CWE-506)

2021-03-16 support@hackerone.com

Information Disclosure Ivanti Psa 5000 Firmware Psa 7000 Firmware X10Slh F Firmware X10Sll F Firmware X10Slm F Firmware X10Slm Ln4F Firmware X10Sla F Firmware X10Sl7 F Firmware X10Sll S Firmware X10Sll Sf Firmware

2.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.3 LOW

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Mar 16, 2021 - 16:15 nvd

LOW 2.3

DescriptionNVD

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

AnalysisAI

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. Rated low severity (CVSS 2.3), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-506. A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device. Affected products include: Pulsesecure Psa-5000 Firmware, Pulsesecure Psa-7000 Firmware, Supermicro X10Slh-F Firmware, Supermicro X10Sll-F Firmware, Supermicro X10Slm-F Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.