Is CVE-2021-3439 in the CISA KEV catalog?

No. CVE-2021-3439 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2021-3439?

CVE-2021-3439 has a CVSS v3 base score of 7.8 (HIGH).

What is the EPSS score for CVE-2021-3439?

CVE-2021-3439 has an EPSS score of 0.17% (7th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2021-3439?

Upgrade 218 pro g5 microtower pc firmware to f.12 or later. Fixes are available for 158 affected products.

CVE & CISA-KEV Catalog

CVE-2021-3439

HIGH

7.8

CVSS v3

NVD

Description

HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.

CWE-269Improper Privilege Management

How to fix

Remediation Available

218 pro g5 microtower pc firmwareNVD

Affected:< f.12Fixed in:f.12CVE-2021-3439derived from NVD

240 g6 firmwareNVD

Affected:< f.50Fixed in:f.50CVE-2021-3439derived from NVD

240 g7 firmwareNVD

Affected:< f.64Fixed in:f.64CVE-2021-3439derived from NVD

246 g6 firmwareNVD

Affected:< f.50Fixed in:f.50CVE-2021-3439derived from NVD

246 g7 firmwareNVD

Affected:< f.64Fixed in:f.64CVE-2021-3439derived from NVD

250 g5 firmwareNVD

Affected:< f.51Fixed in:f.51CVE-2021-3439derived from NVD

250 g6 firmwareNVD

Affected:< f.68Fixed in:f.68CVE-2021-3439derived from NVD

250 g7 firmwareNVD

Affected:< f.38Fixed in:f.38CVE-2021-3439derived from NVD

256 g5 firmwareNVD

Affected:< f.51Fixed in:f.51CVE-2021-3439derived from NVD

256 g6 firmwareNVD

Affected:< f.68Fixed in:f.68CVE-2021-3439derived from NVD

256 g7 firmwareNVD

Affected:< f.38Fixed in:f.38CVE-2021-3439derived from NVD

258 g6 firmwareNVD

Affected:< f.68Fixed in:f.68CVE-2021-3439derived from NVD

258 g7 firmwareNVD

Affected:< f.38Fixed in:f.38CVE-2021-3439derived from NVD

340 g3 firmwareNVD

Affected:< f.52Fixed in:f.52CVE-2021-3439derived from NVD

340 g4 firmwareNVD

Affected:< f.62Fixed in:f.62CVE-2021-3439derived from NVD

340 g5 firmwareNVD

Affected:< f.25Fixed in:f.25CVE-2021-3439derived from NVD

340 g7 firmwareNVD

Affected:< f.35Fixed in:f.35CVE-2021-3439derived from NVD

340s g7 firmwareNVD

Affected:< f.21Fixed in:f.21CVE-2021-3439derived from NVD

346 g3 firmwareNVD

Affected:< f.52Fixed in:f.52CVE-2021-3439derived from NVD

346 g4 firmwareNVD

Affected:< f.50Fixed in:f.50CVE-2021-3439derived from NVD

348 g3 firmwareNVD

Affected:< f.52Fixed in:f.52CVE-2021-3439derived from NVD

348 g4 firmwareNVD

Affected:< f.62Fixed in:f.62CVE-2021-3439derived from NVD

348 g5 firmwareNVD

Affected:< f.25Fixed in:f.25CVE-2021-3439derived from NVD

348 g7 firmwareNVD

Affected:< f.35Fixed in:f.35CVE-2021-3439derived from NVD

470 g7 firmwareNVD

Affected:< f.64Fixed in:f.64CVE-2021-3439derived from NVD

elite dragonfly firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elite dragonfly g2 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

elite dragonfly max firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

elite x2 1012 g1 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elite x2 1012 g1 tablet firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elite x2 1012 g2 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elite x2 1013 g3 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elite x2 g4 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook 1030 g1 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook 1040 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook 1040 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook 1050 g1 firmwareNVD

Affected:< 1.16Fixed in:1.16CVE-2021-3439derived from NVD

elitebook 820 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook 820 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook 828 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook 828 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook 830 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook 830 g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook 830 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

elitebook 836 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook 836 g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook 840 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook 840 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook 840 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook 840 g5 healthcare edition firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook 840 g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook 840 g6 healthcare edition firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook 840 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

elitebook 840r g4 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook 846 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook 848 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook 848 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook 850 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook 850 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook 850 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook 850 g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook 850 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

elitebook folio g1 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

elitebook x360 1020 g2 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook x360 1030 g2 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

elitebook x360 1030 g3 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook x360 1030 g4 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook x360 1030 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

elitebook x360 1030 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

elitebook x360 1040 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook x360 1040 g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook x360 1040 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

elitebook x360 1040 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

elitebook x360 830 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

elitebook x360 830 g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

elitebook x360 830 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

pro x2 612 g2 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

probook 11 g2 education edition firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 430 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 430 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

probook 430 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 430 g6 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 430 g7 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

probook 430 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

probook 440 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 440 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

probook 440 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 440 g6 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 440 g7 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

probook 440 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

probook 446 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 450 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 450 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

probook 450 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 450 g6 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 450 g7 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

probook 450 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

probook 470 g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 470 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

probook 470 g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 630 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

probook 640 g2 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 640 g3 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

probook 640 g4 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 640 g5 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

probook 640 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

probook 640 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

probook 650 g2 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

probook 650 g3 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

probook 650 g4 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

probook 650 g5 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

probook 650 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

probook 650 g8 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

probook x360 11 g2 education edition firmwareNVD

Affected:< 1.4Fixed in:1.4CVE-2021-3439derived from NVD

probook x360 11 g3 education edition firmwareNVD

Affected:< 01.15.00Fixed in:01.15.00CVE-2021-3439derived from NVD

probook x360 11 g4 education edition firmwareNVD

Affected:< 01.10.00Fixed in:01.10.00CVE-2021-3439derived from NVD

probook x360 11 g5 education edition firmwareNVD

Affected:< 01.06.00Fixed in:01.06.00CVE-2021-3439derived from NVD

probook x360 11 g6 education edition firmwareNVD

Affected:< 01.06.00Fixed in:01.06.00CVE-2021-3439derived from NVD

probook x360 440 g1 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

spectre pro 13 g1 firmwareNVD

Affected:< f.48Fixed in:f.48CVE-2021-3439derived from NVD

spectre pro x360 g2 firmwareNVD

Affected:< f.28Fixed in:f.28CVE-2021-3439derived from NVD

stream 11 pro g4 firmwareNVD

Affected:< f.25Fixed in:f.25CVE-2021-3439derived from NVD

stream 11 pro g5 firmwareNVD

Affected:< f.13Fixed in:f.13CVE-2021-3439derived from NVD

zbook 14u g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

zbook 14u g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

zbook 14u g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

zbook 15 g3 firmwareNVD

Affected:< 1.53Fixed in:1.53CVE-2021-3439derived from NVD

zbook 15 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

zbook 15 g5 firmwareNVD

Affected:< 1.16Fixed in:1.16CVE-2021-3439derived from NVD

zbook 15 g6 firmwareNVD

Affected:< 1.09Fixed in:1.09CVE-2021-3439derived from NVD

zbook 15u g3 firmwareNVD

Affected:< 1.52Fixed in:1.52CVE-2021-3439derived from NVD

zbook 15u g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

zbook 15u g5 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

zbook 15u g6 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

zbook 15v g5 mobile workstation firmwareNVD

Affected:< f.32Fixed in:f.32CVE-2021-3439derived from NVD

zbook 17 g3 firmwareNVD

Affected:< 1.53Fixed in:1.53CVE-2021-3439derived from NVD

zbook 17 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

zbook 17 g5 firmwareNVD

Affected:< 1.16Fixed in:1.16CVE-2021-3439derived from NVD

zbook 17 g6 firmwareNVD

Affected:< 1.09Fixed in:1.09CVE-2021-3439derived from NVD

zbook create g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

zbook firefly 14 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

zbook firefly 15 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

zbook fury 15 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

zbook fury 17 g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

zbook power g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

zbook studio g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

zbook studio g5 firmwareNVD

Affected:< 1.16Fixed in:1.16CVE-2021-3439derived from NVD

zbook studio g7 firmwareNVD

Affected:< 01.05.00Fixed in:01.05.00CVE-2021-3439derived from NVD

zbook studio x360 g5 firmwareNVD

Affected:< 1.16Fixed in:1.16CVE-2021-3439derived from NVD

zbook x2 g4 firmwareNVD

Affected:< 1.39Fixed in:1.39CVE-2021-3439derived from NVD

zhan 66 pro 13 g2 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

zhan 66 pro 14 g2 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

zhan 66 pro 14 g3 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

zhan 66 pro 14 g4 firmwareNVD

Affected:< 01.04.01Fixed in:01.04.01CVE-2021-3439derived from NVD

zhan 66 pro 15 g2 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

zhan 66 pro 15 g3 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

zhan 66 pro g1 firmwareNVD

Affected:< 01.16.00Fixed in:01.16.00CVE-2021-3439derived from NVD

zhan x 13 g2 firmwareNVD

Affected:< 01.09.00Fixed in:01.09.00CVE-2021-3439derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.17%probability of exploitation in 30 days

7thpercentile

Low risk: more likely to be exploited than 7% of all known CVEs.

References

Patch1

support.hp.com

Related Vulnerabilities

Other CWE-269 (Improper Privilege Management) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2017-12635	Critical	9.8	100%	-	Fix
CVE-2022-24637	Critical	9.8	99%	-	Fix
CVE-2017-5689	Critical	9.8	92%	KEV	Fix
CVE-2020-3243	Critical	9.8	88%	-	-
CVE-2024-21888	High	8.8	87%	-	-
CVE-2022-0441	Critical	9.8	85%	-	Fix

Embed a live status badge for CVE-2021-3439

Markdown

[![CVE-2021-3439](https://tridentstack.com/cve/badge/CVE-2021-3439.svg)](https://tridentstack.com/cve/CVE-2021-3439)

HTML

<a href="https://tridentstack.com/cve/CVE-2021-3439"><img src="https://tridentstack.com/cve/badge/CVE-2021-3439.svg" alt="CVE-2021-3439"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-03-27.