← Database

CVE-2021-39298

HIGH CVSS: 8.8 Published: 2022-02-16 Modified: 2026-06-17

Description

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

Affected Platforms

Hp Elitebook 850 G8Hp Elitedesk 800 G5 Desktop Mini PcHp Probook 430 G5Hp Elitedesk 800 G5 Tower Pc FirmwareHp Prodesk 600 G5 Small Form Factor PcHp Probook X360 11 G4 Education Edition FirmwareHp Elitedesk 800 G4 Workstation Edition FirmwareHp Eliteone 800 G4 23.8-Inch Touch All-In-One PcHp Probook X360 11 G5 Education Edition FirmwareHp Probook 450 G6 Firmware

Weakness Type

NVD-CWE-noinfo

References