{"id":"CVE-2021-3808","state":"PUBLISHED","title":"Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware","description":"Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.","publishedAt":"2023-01-30T20:52:16.761Z","updatedAt":"2025-03-27T19:02:10.722Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"hp","products":["HP Inc. HP PC BIOS"],"affected":[{"vendor":"HP Inc.","product":"HP PC BIOS","versions":[{"version":"See HP Security Bulletin reference for affected versions.","status":"affected"}]}],"references":["https://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T19:48:55.807Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/3xxx/CVE-2021-3808.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-3808","state":"PUBLISHED","datePublished":"2023-01-30T20:52:16.761Z","dateUpdated":"2025-03-27T19:02:10.722Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2021-09-16T17:38:58.392Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities."}],"affected":[{"vendor":"HP Inc.","product":"HP PC BIOS","versions":[{"version":"See HP Security Bulletin reference for affected versions.","status":"affected"}]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788"}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2023-02-01T06:15:59.102Z"},"x_generator":{"engine":"cveClient/1.0.13"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T17:09:09.475Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-03-27T19:01:38.833668Z","id":"CVE-2021-3808","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","type":"CWE","lang":"en","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-27T19:02:10.722Z"}}]}}}