CVE-2021-22887: Pulse Secure Psa-5000 Firmware

Low severity, CVSS 2.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.

Affected products

• Pulse Secure Psa-5000 Firmware: affected versions not specified
• Pulse Secure Psa-7000 Firmware: affected versions not specified
• Supermicro x10sl7-F Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10sla-F Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10slh-F Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10sll+f Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10sll-F Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10sll-S Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10sll-Sf Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10slm+-F Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10slm+ln4f Firmware: before 3.4 (fixed in 3.4)
• Supermicro x10slm-F Firmware: before 3.4 (fixed in 3.4)

Published 2021-03-16. Last modified 2026-06-17.