CVSS 3.1
8.4 highCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-3661
High (8.4) in hp. EPSS 0.3% chance of exploitation in the next 30 days.
A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:z1_all-in-one_g3_firmware
- hp:z238_microtower_firmware
- hp:z240_small_form_factor_firmware
- hp:z240_tower_firmware
- hp:z2_mini_g3_firmware
- hp:z2_mini_g4_firmware
- hp:z2_mini_g5_firmware
- hp:z2_small_form_factor_g4_firmware
- hp:z2_small_form_factor_g5_firmware
- hp:z2_small_form_factor_g8_firmware
- hp:z2_tower_g4_firmware
- hp:z2_tower_g5_firmware
- hp:z2_tower_g8_firmware
- hp:z440_firmware
- hp:z4_g4_firmware
- hp:z640_firmware
- hp:z6_g4_firmware
- hp:z840_firmware
- hp:z8_g4_firmware
- hp:zcentral_4r_firmware