CVEvulnerability

CVE-2021-36343

6.4 MEDIUM Published 2022-01-24 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2022-01-24
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119, CWE-20

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected configurations

• dell precision 5820 tower firmware (< 2.12.1) • dell precision 7510 firmware (< 1.24.3) • dell precision 7520 firmware (< 1.22.0) • dell precision 7530 firmware (< 1.18.2) • dell precision 7540 firmware (< 1.15.1) • dell precision 7550 firmware (< 1.10.1) • dell precision 7560 firmware (< 1.5.0) • dell precision 7710 firmware (< 1.24.3) • dell precision 7720 firmware (< 1.22.0) • dell precision 7730 firmware (< 1.18.2) • dell precision 7740 firmware (< 1.15.1) • dell precision 7750 firmware (< 1.10.1) • dell precision 7760 firmware (< 1.5.0) • dell vostro 13 5370 firmware (< 1.20.0) • dell vostro 14 3468 firmware (< 3.10.0) • dell vostro 14 3478 firmware (< 1.15.0) • dell vostro 14 5468 firmware (< 1.17.0) • dell vostro 14 5471 firmware (< 1.20.0) • dell vostro 15 3568 firmware (< 3.10.0) • dell vostro 15 3572 firmware (< 1.12.0) • dell vostro 15 3578 firmware (< 1.15.0) • dell vostro 15 5410 firmware (< 2.4.1) • dell vostro 15 5510 firmware (< 2.4.1) • dell vostro 15 5568 firmware (< 1.17.0) • dell vostro 15 7570 firmware (< 1.15.0) • dell vostro 15 7580 firmware (< 1.18.0) • dell vostro 3070 firmware (< 2.20.0) • dell vostro 3267 firmware (< 1.18.0) • dell vostro 3268 firmware (< 1.18.0) • dell vostro 3400 firmware (< 1.9.0) • dell vostro 3401 firmware (< 1.9.0) • dell vostro 3470 firmware (< 2.20.0) • dell vostro 3471 firmware (< 1.8.0) • dell vostro 3480 firmware (< 1.16.0) • dell vostro 3481 firmware (< 1.15.0) • dell vostro 3490 firmware (< 1.15.0) • dell vostro 3500 firmware (< 1.9.0) • dell vostro 3501 firmware (< 1.9.0) • dell vostro 3510 firmware (< 1.6.0) • dell vostro 3562 firmware (< 1.19.0) • dell vostro 3580 firmware (< 1.16.0) • dell vostro 3581 firmware (< 1.15.0) • dell vostro 3582 firmware (< 1.11.0) • dell vostro 3583 firmware (< 1.16.0) • dell vostro 3584 firmware (< 1.15.0) • dell vostro 3590 firmware (< 1.15.0) • dell vostro 3660 firmware (< 1.18.0) • dell vostro 3667 firmware (< 1.18.0) • dell vostro 3668 firmware (< 1.18.0) • dell vostro 3669 firmware (< 1.18.0) • dell vostro 3670 firmware (< 2.20.0) • dell vostro 3671 firmware (< 1.8.0) • dell vostro 3681 firmware (< 2.6.1) • dell vostro 3690 firmware (< 1.2.2) • dell vostro 3881 firmware (< 2.6.1) • dell vostro 3888 firmware (< 2.6.1) • dell vostro 3890 firmware (< 1.2.2) • dell vostro 5090 firmware (< 1.10.0) • dell vostro 5300 firmware (< 1.9.0) • dell vostro 5301 firmware (< 1.11.0) … and 354 more

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-20 Improper Input Validation weakness

References