Lucene search

TianoCoreCVE-2021-38576

HistoryJan 03, 2022 - 10:15 p.m.

CVE-2021-38576

2022-01-0322:15:09

TianoCore

web.nvd.nist.gov

bios bug

firmware

pc model

platform authorization

tpm

dos

cve-2021-38576

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.

Affected configurations

Nvd

Node

tianocoreedk2Match201808

tianocoreedk2Match201811

tianocoreedk2Match201903

tianocoreedk2Match201905

tianocoreedk2Match201908

tianocoreedk2Match201911

tianocoreedk2Match202002

tianocoreedk2Match202005

tianocoreedk2Match202008

tianocoreedk2Match202011

tianocoreedk2Match202102

tianocoreedk2Match202105

VendorProductVersionCPE
tianocoreedk2201808cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
tianocoreedk2201811cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
tianocoreedk2201903cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
tianocoreedk2201905cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
tianocoreedk2201908cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
tianocoreedk2201911cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
tianocoreedk2202002cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
tianocoreedk2202005cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
tianocoreedk2202008cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
tianocoreedk2202011cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tianocore	edk2	201808	cpe:2.3:a:tianocore:edk2:201808:::::::*
tianocore	edk2	201811	cpe:2.3:a:tianocore:edk2:201811:::::::*
tianocore	edk2	201903	cpe:2.3:a:tianocore:edk2:201903:::::::*
tianocore	edk2	201905	cpe:2.3:a:tianocore:edk2:201905:::::::*
tianocore	edk2	201908	cpe:2.3:a:tianocore:edk2:201908:::::::*
tianocore	edk2	201911	cpe:2.3:a:tianocore:edk2:201911:::::::*
tianocore	edk2	202002	cpe:2.3:a:tianocore:edk2:202002:::::::*
tianocore	edk2	202005	cpe:2.3:a:tianocore:edk2:202005:::::::*
tianocore	edk2	202008	cpe:2.3:a:tianocore:edk2:202008:::::::*
tianocore	edk2	202011	cpe:2.3:a:tianocore:edk2:202011:::::::*

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "product": "EDK II",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "edk2-stable202105, edk2-stable202102, edk2-stable202011, edk2-stable202008, edk2-stable202005, edk2-stable202002, edk2-stable201911, edk2-stable201908, edk2-stable201905, edk2-stable201903, edk2-stable201811, edk2-stable201808"
      }
    ]
  }
]