vulnerability
Aruba AOS-10: CVE-2021-42113: SMM Privilege Escalation Vulnerability in StorageSecurityCommandDxe
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:N/C:P/I:P/A:P) | Feb 1, 2022 | Jan 14, 2025 | Apr 2, 2026 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Feb 1, 2022
Added
Jan 14, 2025
Modified
Apr 2, 2026
Description
An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.
Solution
aruba-aos-10-cve-2021-42113
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.