System	Score	Found at
cvssv3.1	7.4	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2	7.5	https://nvd.nist.gov/vuln/detail/CVE-2021-38577
cvssv3	9.8	https://nvd.nist.gov/vuln/detail/CVE-2021-38577

Reference id	Reference type	URL
		https://bugzilla.tianocore.org/show_bug.cgi?id=3360
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38577
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1014468		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014468
cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*
CVE-2021-38577		https://nvd.nist.gov/vuln/detail/CVE-2021-38577

No exploits are available.

Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2021-38577

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2021-38577

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

No EPSS data available for this vulnerability.

Date	Actor	Action	Source	VulnerableCode Version
2025-04-18T18:00:30.950303+00:00	NVD CVE Status Improver	Improve	https://cveawg.mitre.org/api/cve/CVE-2021-38577	36.0.0