CVEvulnerability
CVE-2021-36283
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-09-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Affected configurations
• dell chengming 3990 firmware (< 1.3.1)
• dell chengming 3991 firmware (< 1.3.1)
• dell g3 15 3500 firmware (< 1.7.1)
• dell g3 15 3590 firmware (< 1.12.0)
• dell g3 15 5500 firmware (< 1.7.1)
• dell inspiron 3493 firmware (< 1.12.0)
• dell inspiron 3501 firmware (< 1.1.0)
• dell inspiron 3593 firmware (< 1.12.0)
• dell inspiron 3793 firmware (< 1.12.0)
• dell inspiron 3880 firmware (< 1.3.1)
• dell inspiron 3881 firmware (< 1.3.1)
• dell inspiron 5400 2-in-1 firmware (< 1.5.0)
• dell inspiron 5490 firmware (< 1.12.0)
• dell inspiron 5493 firmware (< 1.12.0)
• dell inspiron 5498 firmware (< 1.12.0)
• dell inspiron 5590 firmware (< 1.12.0)
• dell inspiron 5593 firmware (< 1.12.0)
• dell inspiron 5598 firmware (< 1.12.0)
• dell inspiron 7391 2-in-1 firmware (< 1.9.1)
• dell inspiron 7500 firmware (< 1.5.1)
• dell inspiron 7500 2-in-1 silver firmware (< 1.5.0)
• dell inspiron 7501 firmware (< 1.5.1)
• dell inspiron 7590 firmware (< 1.8.0)
• dell inspiron 7591 firmware (< 1.8.0)
• dell latitude 3310 firmware (< 1.8.3)
• dell latitude 3310 2-in-1 firmware (< 1.17.1)
• dell latitude 5300 firmware (< 1.12.1)
• dell latitude 5300 2-in-1 firmware (< 1.12.1)
• dell latitude 5310 firmware (< 1.4.2)
• dell latitude 5310 2 in 1 firmware 1.4.2
• dell latitude 5400 firmware (< 1.10.1)
• dell latitude 5401 firmware (< 1.11.1)
• dell latitude 5410 firmware (< 1.4.3)
• dell latitude 5411 firmware (< 1.4.3)
• dell latitude 5500 firmware (< 1.10.1)
• dell latitude 5511 firmware (< 1.4.3)
• dell latitude 7200 2 in 1 firmware (< 1.10.1)
• dell latitude 7210 2 in 1 firmware (< 1.5.1)
• dell latitude 7220ex rugged extreme tablet firmware (< 1.9.1)
• dell latitude 7300 firmware (< 1.11.1)
• dell latitude 7310 firmware (< 1.5.1)
• dell latitude 7400 firmware (< 1.11.1)
• dell latitude 7400 2-in-1 firmware (< 1.10.0)
• dell latitude 7410 firmware (< 1.5.1)
• dell latitude 9410 firmware (< 1.5.1)
• dell latitude 9510 firmware (< 1.4.2)
• dell optiplex 3080 firmware (< 1.3.1)
• dell optiplex 3280 aio firmware (< 1.3.1)
• dell optiplex 5080 firmware (< 1.3.1)
• dell optiplex 5480 aio firmware (< 1.4.0)
• dell optiplex 7080 firmware (< 1.3.10)
• dell optiplex 7480 aio firmware (< 1.6.2)
• dell optiplex 7780 aio firmware (< 1.6.2)
• dell precision 3440 firmware (< 1.3.10)
• dell precision 3540 firmware (< 1.10.1)
• dell precision 3541 firmware (< 1.11.1)
• dell precision 3550 firmware (< 1.4.3)
• dell precision 3551 firmware (< 1.4.3)
• dell precision 3640 tower firmware (< 1.4.3)
• dell precision 5540 firmware (< 1.9.1)
… and 25 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://www.dell.com/support/kbdoc/000191495/ Patch, Vendor Advisory
- https://www.dell.com/support/kbdoc/000191495/ Patch, Vendor Advisory