CVEvulnerability

CVE-2021-36324

6.7 MEDIUM Published 2021-11-12 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2021-11-12
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected configurations

• dell alienware 13 r3 firmware (< 1.13.0) • dell alienware 15 r3 firmware (< 1.13.0) • dell alienware 15 r4 firmware (< 1.14.0) • dell alienware 17 r4 firmware (< 1.13.0) • dell alienware 17 r5 firmware (< 1.14.0) • dell alienware area 51m r1 firmware (< 1.15.1) • dell alienware area 51m r2 firmware (< 1.10.0) • dell alienware aurora r11 firmware (< 1.0.9) • dell alienware aurora r12 firmware (< 1.1.7) • dell alienware aurora r7 firmware (< 1.0.25) • dell alienware aurora r8 firmware (< 1.0.17) • dell alienware aurora r9 firmware (< 1.0.14) • dell alienware aurora ryzen edition firmware (< 2.2.4) • dell alienware m15 r1 firmware (< 2.9.0) • dell alienware m15 r2 firmware (< 1.9.0) • dell alienware m15 r3 firmware (< 1.11.0) • dell alienware m17 r1 firmware (< 2.9.0) • dell alienware m17 r2 firmware (< 1.9.0) • dell alienware m17 r3 firmware (< 1.11.0) • dell alienware x15 r1 firmware (< 1.4.0) • dell alienware x17 r1 firmware (< 1.4.0) • dell chengming 3977 firmware (< 1.13.0) • dell chengming 3980 firmware (< 2.19.0) • dell chengming 3988 firmware (< 1.7.0) • dell chengming 3990 firmware (< 1.5.1) • dell chengming 3991 firmware (< 1.5.1) • dell g3 3579 firmware (< 1.17.0) • dell g3 3590 firmware (< 1.14.0) • dell g3 3779 firmware (< 1.17.0) • dell g5 5000 firmware (< 1.3.0) • dell g5 5090 firmware (< 1.9.0) • dell g5 5587 firmware (< 1.17.0) • dell g5 5590 firmware (< 1.16.0) • dell g7 7587 firmware (< 1.17.0) • dell g7 7588 firmware (<= 1.17.0) • dell g7 7590 firmware (<= 1.16.0) • dell g7 7790 firmware (<= 1.16.0) • dell embedded box pc 5000 firmware (< 1.11.0) • dell inspiron 13 5378 firmware (< 1.34.0) • dell inspiron 13 5379 firmware (< 1.17.0) • dell inspiron 14 3467 firmware (< 2.16.0) • dell inspiron 14 5468 firmware (< 1.15.0) • dell inspiron 15 3567 firmware (< 2.16.0) • dell inspiron 15 5566 firmware (< 1.15.0) • dell inspiron 15 5578 firmware (< 1.34.0) • dell inspiron 15 5579 firmware (< 1.17.0) • dell inspiron 15 5582 firmware (< 2.11.0) • dell inspiron 15 7570 firmware (< 1.20.0) • dell inspiron 15 7572 firmware (< 1.8.0) • dell inspiron 15 7573 firmware (< 1.20.0) • dell inspiron 15 7577 firmware (< 1.14.0) • dell inspiron 17 7773 firmware (< 1.17.0) • dell inspiron 3268 firmware (< 1.17.1) • dell inspiron 3277 firmware (< 1.16.0) • dell inspiron 3280 firmware (< 1.12.0) • dell inspiron 3470 firmware (< 2.19.0) • dell inspiron 3471 firmware (< 1.7.0) • dell inspiron 3476 firmware (< 1.14.0) • dell inspiron 3477 firmware (< 1.16.0) • dell inspiron 3480 firmware (< 1.15.0) … and 230 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References