CVEvulnerability
CVE-2021-21571
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-06-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-295
Description
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.
Affected configurations
• dell alienware m15 r6 firmware (< 1.3.3)
• dell chengming 3990 firmware (< 1.4.1)
• dell chengming 3991 firmware (< 1.4.1)
• dell g15 5510 firmware (< 1.4.0)
• dell g15 5511 firmware (< 1.3.3)
• dell g3 3500 firmware (< 1.9.0)
• dell g5 5500 firmware (< 1.9.0)
• dell g7 7500 firmware (< 1.9.0)
• dell g7 7700 firmware (< 1.9.0)
• dell inspiron 14 5418 firmware (< 2.1.0 a06)
• dell inspiron 15 5518 firmware (< 2.1.0 a06)
• dell inspiron 15 7510 firmware (< 1.0.4)
• dell inspiron 3501 firmware (< 1.6.0)
• dell inspiron 3880 firmware (< 1.4.1)
• dell inspiron 3881 firmware (< 1.4.1)
• dell inspiron 3891 firmware (< 1.0.11)
• dell inspiron 5300 firmware (< 1.7.1)
• dell inspiron 5301 firmware (< 1.8.1)
• dell inspiron 5310 firmware (< 2.1.0)
• dell inspiron 5400 2-in-1 firmware (< 1.7.0)
• dell inspiron 5400 aio firmware (< 1.4.0)
• dell inspiron 5401 firmware (< 1.7.2)
• dell inspiron 5401 aio firmware (< 1.4.0)
• dell inspiron 5402 firmware (< 1.5.1)
• dell inspiron 5406 2n1 firmware (< 1.5.1)
• dell inspiron 5408 firmware (< 1.7.2)
• dell inspiron 5409 firmware (< 1.5.1)
• dell inspiron 5410 2-in-1 firmware (< 2.1.0)
• dell inspiron 5501 firmware (< 1.7.2)
• dell inspiron 5502 firmware (< 1.5.1)
• dell inspiron 5508 firmware (< 1.7.2)
• dell inspiron 5509 firmware (< 1.5.1)
• dell inspiron 7300 firmware (< 1.8.1)
• dell inspiron 7300 2-in-1 firmware (< 1.3.0)
• dell inspiron 7306 2-in-1 firmware (< 1.5.1)
• dell inspiron 7400 firmware (< 1.8.1)
• dell inspiron 7500 firmware (< 1.8.0)
• dell inspiron 7500 2-in-1 firmware (< 1.3.0)
• dell inspiron 7501 firmware (< 1.8.0)
• dell inspiron 7506 firmware (< 1.5.1)
• dell inspiron 7610 firmware (< 1.0.4)
• dell inspiron 7700 aio firmware (< 1.4.0)
• dell inspiron 7706 2-in-1 firmware (< 1.5.1)
• dell latitude 3120 firmware (< 1.1.0)
• dell latitude 3320 firmware (< 1.4.0)
• dell latitude 3410 firmware (< 1.9.0)
• dell latitude 3420 firmware (< 1.8.0)
• dell latitude 3510 firmware (< 1.9.0)
• dell latitude 3520 firmware (< 1.8.0)
• dell latitude 5310 firmware (< 1.7.0)
• dell latitude 5310 2-in-1 firmware (< 1.7.0)
• dell latitude 5320 firmware (< 1.7.1)
• dell latitude 5320 2-in-1 firmware (< 1.7.1)
• dell latitude 5410 firmware (< 1.6.0)
• dell latitude 5411 firmware (< 1.6.0)
• dell latitude 5420 firmware (< 1.8.0)
• dell latitude 5510 firmware (< 1.6.0)
• dell latitude 5511 firmware (< 1.6.0)
• dell latitude 5520 firmware (< 1.7.1)
• dell latitude 5521 firmware (< 1.3.0 a03)
… and 68 more
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://www.dell.com/support/kbdoc/en-us/000188682 Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000188682 Vendor Advisory