What’s Vulnerable › Vulnerabilities

CVE-2021-3661

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-12 · updated 2026-06-17
• Weakness: CWE-94

Description

A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.

Affected products

• HP Z1 All-In-One G3 Firmware: 01.31
• HP Z238 Microtower Firmware: 01.83
• HP Z240 Small Form Factor Firmware: 01.83
• HP Z240 Tower Firmware: 01.83
• HP Z2 Mini G3 Firmware: 01.83
• HP Z2 Mini G4 Firmware: 01.08.01
• HP Z2 Mini G5 Firmware: 01.03.00_rev_a
• HP Z2 Small Form Factor G4 Firmware: 01.08.01
• HP Z2 Small Form Factor G5 Firmware: 01.03.00_rev_a
• HP Z2 Small Form Factor G8 Firmware: 01.03.00_rev_a
• HP Z2 Tower G4 Firmware: 01.08.01
• HP Z2 Tower G5 Firmware: 01.03.00_rev_a
• HP Z2 Tower G8 Firmware: 01.03.00_rev_a
• HP Z440 Firmware: 2.58
• HP Z4 G4 Firmware: 02.75
• HP Z640 Firmware: 2.58
• HP Z6 G4 Firmware: 02.75
• HP Z840 Firmware: 2.58
• HP Z8 G4 Firmware: 02.75
• HP Zcentral 4R Firmware: 01.18

References

• https://support.hp.com/us-en/document/ish_5670997-5671021-16/hpsbhf03770
• https://support.hp.com/us-en/document/ish_5670997-5671021-16/hpsbhf03770

Get alerted when CVE-2021-3661 or the next vulnerability affects your stack