CVE-2021-3661

hp z1 all-in-one g3 firmware, hp z2 mini g3 firmware, hp z2 mini g4 firmware +17 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-3661

Katalog CVE

CVSS 8.4 · High EPSS 0,32%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada hp z1 all-in-one g3 firmware, hp z2 mini g3 firmware +18 lainnya. Skor CVSS 3.1 8.4 (High) menurut NVD.

Deskripsi (NVD)

A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.

Rincian

Terbit di NVD
12 Desember 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.4 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-94: Improper Control of Generation of Code ('Code Injection')
EPSS (30 hari)
0,32% peluang dieksploitasi; lebih tinggi dari 22,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
hp z1 all-in-one g3 firmware Versi 01.31
hp z2 mini g3 firmware Versi 01.83
hp z2 mini g4 firmware Versi 01.08.01
hp z2 mini g5 firmware Versi 01.03.00_rev_a
hp z2 small form factor g4 firmware Versi 01.08.01
hp z2 small form factor g5 firmware Versi 01.03.00_rev_a
hp z2 small form factor g8 firmware Versi 01.03.00_rev_a
hp z2 tower g4 firmware Versi 01.08.01
hp z2 tower g5 firmware Versi 01.03.00_rev_a
hp z2 tower g8 firmware Versi 01.03.00_rev_a
hp z238 microtower firmware Versi 01.83
hp z240 small form factor firmware Versi 01.83
hp z240 tower firmware Versi 01.83
hp z4 g4 firmware Versi 02.75
hp z440 firmware Versi 2.58
hp z6 g4 firmware Versi 02.75
hp z640 firmware Versi 2.58
hp z8 g4 firmware Versi 02.75
hp z840 firmware Versi 2.58
hp zcentral 4r firmware Versi 01.18

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.