PT-2021-15255 · Pulse Secure · Pulse Secure

Published 2021-03-16 · Updated 2021-03-22 · CVE-2021-22887

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000

Description A vulnerability in the BIOS could allow an attacker to compromise BIOS firmware. This issue can be exploited only as part of an attack chain, requiring the device to be exploited first.

Recommendations For Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-506

Related Identifiers

CVE-2021-22887

Affected Products

Pulse Secure

References · 6

• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44712 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22887 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22887 · Vendor Advisory
• https://t.me/cibsecurity/24966 · Telegram Post
• https://supermicro.com/en/support/security/Trickbot · Note
• https://t.me/cvenotify/11447 · Telegram Post