CVE-2021-38489

HDD password plaintext is stored in a UEFI variable.

Published Sep 3, 2026
CVSS 8.2 high
0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

Insyde Software InsydeH2O

CVE-2021-38489 at the National Vulnerability Database