Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-38576

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.8
Products affected by CVE-2021-38576
  • Tianocore » Edk2 » Version: 201808
    cpe:2.3:a:tianocore:edk2:201808
  • Tianocore » Edk2 » Version: 201811
    cpe:2.3:a:tianocore:edk2:201811
  • Tianocore » Edk2 » Version: 201903
    cpe:2.3:a:tianocore:edk2:201903
  • Tianocore » Edk2 » Version: 201905
    cpe:2.3:a:tianocore:edk2:201905
  • Tianocore » Edk2 » Version: 201908
    cpe:2.3:a:tianocore:edk2:201908
  • Tianocore » Edk2 » Version: 201911
    cpe:2.3:a:tianocore:edk2:201911
  • Tianocore » Edk2 » Version: 202002
    cpe:2.3:a:tianocore:edk2:202002
  • Tianocore » Edk2 » Version: 202005
    cpe:2.3:a:tianocore:edk2:202005
  • Tianocore » Edk2 » Version: 202008
    cpe:2.3:a:tianocore:edk2:202008
  • Tianocore » Edk2 » Version: 202011
    cpe:2.3:a:tianocore:edk2:202011
  • Tianocore » Edk2 » Version: 202102
    cpe:2.3:a:tianocore:edk2:202102
  • Tianocore » Edk2 » Version: 202105
    cpe:2.3:a:tianocore:edk2:202105


Contact Us

Shodan ® - All rights reserved