CVEvulnerability

CVE-2021-21572

7.5 HIGH Published 2021-06-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-122, CWE-787

Description

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.

Affected configurations

• dell alienware m15 r6 firmware (< 1.3.3) • dell chengming 3990 firmware (< 1.4.1) • dell chengming 3991 firmware (< 1.4.1) • dell g15 5510 firmware (< 1.4.0) • dell g15 5511 firmware (< 1.3.3) • dell g3 3500 firmware (<= 1.9.0) • dell g5 5500 firmware (< 1.9.0) • dell g7 7500 firmware (< 1.9.0) • dell g7 7700 firmware (< 1.9.0) • dell inspiron 14 5418 firmware (< 2.1.0 a06) • dell inspiron 15 5518 firmware (< 2.1.0 a06) • dell inspiron 15 7510 firmware (< 1.0.4) • dell inspiron 3501 firmware (< 1.6.0) • dell inspiron 3880 firmware (< 1.4.1) • dell inspiron 3881 firmware (< 1.4.1) • dell inspiron 3891 firmware (< 1.0.11) • dell inspiron 5300 firmware (< 1.7.1) • dell inspiron 5301 firmware (< 1.8.1) • dell inspiron 5310 firmware (< 2.1.0) • dell inspiron 5400 2-in-1 firmware (< 1.7.0) • dell inspiron 5400 aio firmware (< 1.4.0) • dell inspiron 5401 firmware (< 1.7.2) • dell inspiron 5401 aio firmware (< 1.4.0) • dell inspiron 5402 firmware (< 1.5.1) • dell inspiron 5406 2n1 firmware (< 1.5.1) • dell inspiron 5408 firmware (< 1.7.2) • dell inspiron 5409 firmware (< 1.5.1) • dell inspiron 5410 2-in-1 firmware (< 2.1.0) • dell inspiron 5501 firmware (< 1.7.2) • dell inspiron 5502 firmware (< 1.5.1) • dell inspiron 5508 firmware (< 1.7.2) • dell inspiron 5509 firmware (< 1.5.1) • dell inspiron 7300 firmware (< 1.8.1) • dell inspiron 7300 2-in-1 firmware (< 1.3.0) • dell inspiron 7306 2-in-1 firmware (< 1.5.1) • dell inspiron 7400 firmware (< 1.8.1) • dell inspiron 7500 firmware (< 1.8.0) • dell inspiron 7500 2-in-1 firmware (< 1.3.0) • dell inspiron 7501 firmware (< 1.8.0) • dell inspiron 7506 firmware (< 1.5.1) • dell inspiron 7610 firmware (< 1.0.4) • dell inspiron 7700 aio firmware (< 1.4.0) • dell inspiron 7706 2-in-1 firmware (< 1.5.1) • dell latitude 3120 firmware (< 1.1.0) • dell latitude 3320 firmware (< 1.4.0) • dell latitude 3410 firmware (< 1.9.0) • dell latitude 3420 firmware (< 1.8.0) • dell latitude 3510 firmware (< 1.9.0) • dell latitude 3520 firmware (< 1.8.0) • dell latitude 5310 firmware (< 1.7.0) • dell latitude 5310 2-in-1 firmware (< 1.7.0) • dell latitude 5320 firmware (< 1.7.1) • dell latitude 5320 2-in-1 firmware (< 1.7.1) • dell latitude 5410 firmware (< 1.6.0) • dell latitude 5411 firmware (< 1.6.0) • dell latitude 5420 firmware (< 1.8.0) • dell latitude 5510 firmware (< 1.6.0) • dell latitude 5511 firmware (< 1.6.0) • dell latitude 5520 firmware (< 1.7.1) • dell latitude 5521 firmware (< 1.3.0 a03) … and 68 more

Related

Weakness · CWE (2)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References