CVEvulnerability
CVE-2021-21573
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-121, CWE-787
Description
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
Affected configurations
• dell alienware m15 r6 firmware (< 1.3.3)
• dell chengming 3990 firmware (< 1.4.1)
• dell chengming 3991 firmware (< 1.4.1)
• dell g15 5510 firmware (< 1.4.0)
• dell g15 5511 firmware (< 1.3.3)
• dell g3 3500 firmware (<= 1.9.0)
• dell g5 5500 firmware (< 1.9.0)
• dell g7 7500 firmware (< 1.9.0)
• dell g7 7700 firmware (< 1.9.0)
• dell inspiron 14 5418 firmware (< 2.1.0 a06)
• dell inspiron 15 5518 firmware (< 2.1.0 a06)
• dell inspiron 15 7510 firmware (< 1.0.4)
• dell inspiron 3501 firmware (< 1.6.0)
• dell inspiron 3880 firmware (< 1.4.1)
• dell inspiron 3881 firmware (< 1.4.1)
• dell inspiron 3891 firmware (< 1.0.11)
• dell inspiron 5300 firmware (< 1.7.1)
• dell inspiron 5301 firmware (< 1.8.1)
• dell inspiron 5310 firmware (< 2.1.0)
• dell inspiron 5400 2-in-1 firmware (< 1.7.0)
• dell inspiron 5400 aio firmware (< 1.4.0)
• dell inspiron 5401 firmware (< 1.7.2)
• dell inspiron 5401 aio firmware (< 1.4.0)
• dell inspiron 5402 firmware (< 1.5.1)
• dell inspiron 5406 2n1 firmware (< 1.5.1)
• dell inspiron 5408 firmware (< 1.7.2)
• dell inspiron 5409 firmware (< 1.5.1)
• dell inspiron 5410 2-in-1 firmware (< 2.1.0)
• dell inspiron 5501 firmware (< 1.7.2)
• dell inspiron 5502 firmware (< 1.5.1)
• dell inspiron 5508 firmware (< 1.7.2)
• dell inspiron 5509 firmware (< 1.5.1)
• dell inspiron 7300 firmware (< 1.8.1)
• dell inspiron 7300 2-in-1 firmware (< 1.3.0)
• dell inspiron 7306 2-in-1 firmware (< 1.5.1)
• dell inspiron 7400 firmware (< 1.8.1)
• dell inspiron 7500 firmware (< 1.8.0)
• dell inspiron 7500 2-in-1 firmware (< 1.3.0)
• dell inspiron 7501 firmware (< 1.8.0)
• dell inspiron 7506 firmware (< 1.5.1)
• dell inspiron 7610 firmware (< 1.0.4)
• dell inspiron 7700 aio firmware (< 1.4.0)
• dell inspiron 7706 2-in-1 firmware (< 1.5.1)
• dell latitude 3120 firmware (< 1.1.0)
• dell latitude 3320 firmware (< 1.4.0)
• dell latitude 3410 firmware (< 1.9.0)
• dell latitude 3420 firmware (< 1.8.0)
• dell latitude 3510 firmware (< 1.9.0)
• dell latitude 3520 firmware (< 1.8.0)
• dell latitude 5310 firmware (< 1.7.0)
• dell latitude 5310 2-in-1 firmware (< 1.7.0)
• dell latitude 5320 firmware (< 1.7.1)
• dell latitude 5320 2-in-1 firmware (< 1.7.1)
• dell latitude 5410 firmware (< 1.6.0)
• dell latitude 5411 firmware (< 1.6.0)
• dell latitude 5420 firmware (< 1.8.0)
• dell latitude 5510 firmware (< 1.6.0)
• dell latitude 5511 firmware (< 1.6.0)
• dell latitude 5520 firmware (< 1.7.1)
• dell latitude 5521 firmware (< 1.3.0 a03)
… and 68 more
Related
References
- https://www.dell.com/support/kbdoc/en-us/000188682 Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000188682 Vendor Advisory