CVE-2021-3439 — HP has identified a potential vulnerability in BIOS firmware of some Workstation products

Back Back to CVE browser

HIGH

HP has identified a potential vulnerability in BIOS firmware of some Workstation products

Published Jan 30, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.17%

Description

HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.

Affected products

Vendor HP Inc. Product HP PC Bios Default
n/a
- Version
  See HP Security Bulletin reference for affected versions.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HP Inc.

HP PC Bios

n/a

Version	Status	Constraints
See HP Security Bulletin reference for affected versions.	affected	-

Remediation

No remediation recorded yet.

Metrics

0.17% 0.00174

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00174

Score over time

2023–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.17% (0.00174)	6.19th	v5 (v2026.06.15)
Jun 15, 2026	0.17% (0.00174)	7.07th	v5 (v2026.06.15)
Mar 17, 2025	0.15% (0.00148)	32.77th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	14.58th	v3 (v2023.03.01)
Jun 13, 2024	0.04% (0.00043)	8.98th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00043)	6.97th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Jan 31, 2023	0.89% (0.00885)	27.43th	v2 (v2022.01.01)