{"cve":"CVE-2021-3439","nvd":{"published":"2023-02-01T07:15:08.857","modified":"2026-06-17T04:05:05.753","status":"Modified","description":"HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-269"],"references":["https://support.hp.com/us-en/document/ish_3982318-3982351-16/hpsbhf03735","https://support.hp.com/us-en/document/ish_3982318-3982351-16/hpsbhf03735"],"products":["hp:200_g3_all-in-one_\\(rom_family_ssid_8431\\)_firmware","hp:200_g3_all-in-one_\\(rom_family_ssid_84de\\)_firmware","hp:200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmware","hp:200_g4_22_all-in-one_pc_\\(rom_family_ssid_86f8\\)_firmware","hp:200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmware","hp:200_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f8\\)_firmware","hp:205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmware","hp:205_g4_22_all-in-one_pc_\\(rom_family_ssid_86f8\\)_firmware","hp:205_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f0\\)_firmware","hp:205_pro_g4_22_all-in-one_pc_\\(rom_family_ssid_86f8\\)_firmware","hp:218_pro_g5_microtower_pc_firmware","hp:240_g4_firmware","hp:240_g5_firmware","hp:240_g6_firmware","hp:240_g7_firmware","hp:246_g4_firmware","hp:246_g5_firmware","hp:246_g6_firmware","hp:246_g7_firmware","hp:250_g4_firmware","hp:250_g5_firmware","hp:250_g6_firmware","hp:250_g7_firmware","hp:256_g4_firmware","hp:256_g5_firmware","hp:256_g6_firmware","hp:256_g7_firmware","hp:258_g6_firmware","hp:258_g7_firmware","hp:260_g2_desktop_mini_firmware","hp:260_g3_desktop_mini_pc_firmware","hp:260_g4_desktop_mini_pc_firmware","hp:280_g3_microtower_pc_firmware","hp:280_g3_pci_microtower_pc_firmware","hp:280_g3_small_form_factor_\\(rom_family_ssid_843f\\)_firmware","hp:280_g4_microtower_\\(rom_family_ssid_843c\\)_firmware","hp:280_g4_small_form_factor_\\(rom_family_ssid_86e9\\)_firmware","hp:280_g4_small_form_factor_\\(rom_family_ssid_8768\\)_firmware","hp:280_g5_microtower_\\(rom_family_ssid_877e\\)_firmware","hp:280_g5_small_form_factor_\\(rom_family_ssid_86e9\\)_firmware","hp:280_pro_g3_microtower_pc_firmware","hp:280_pro_g3_small_form_factor_\\(rom_family_ssid_843f\\)_firmware","hp:280_pro_g4_microtower_\\(rom_family_ssid_843c\\)_firmware","hp:280_pro_g6_microtower_\\(rom_family_ssid_8948\\)_firmware","hp:282_pro_g3_microtower_pc_firmware","hp:282_pro_g4_microtower_\\(rom_family_ssid_843c\\)_firmware","hp:282_pro_g5_microtower_\\(rom_family_ssid_86e9\\)_firmware","hp:282_pro_g6_microtower_\\(rom_family_ssid_8948\\)_firmware","hp:288_pro_g3_microtower_firmware","hp:288_pro_g4_microtower_\\(rom_family_ssid_843c\\)_firmware"],"source":"nvd","synced_at":"2026-10-19T21:37:38.595364862+00:00"},"epss":{"cve":"CVE-2021-3439","score":0.00174,"percentile":0.0688,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}