CVE-2021-36283 : Dell BIOS contains an improper input validation vulnerability. A local authentic

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Published 2021-09-28 20:15:08

Updated 2021-10-04 14:37:37

Source Dell

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2021-36283

Dell » Inspiron 7590 Firmware
Versions before (<) 1.8.0
cpe:2.3:o:dell:inspiron_7590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7590 » Version: N/A
Dell » Inspiron 7591 Firmware
Versions before (<) 1.8.0
cpe:2.3:o:dell:inspiron_7591_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7591 » Version: N/A
Dell » Latitude 5300 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:latitude_5300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5300 » Version: N/A
Dell » Latitude 5400 Firmware
Versions before (<) 1.10.1
cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5400 » Version: N/A
Dell » Latitude 5401 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:latitude_5401_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5401 » Version: N/A
Dell » Latitude 5500 Firmware
Versions before (<) 1.10.1
cpe:2.3:o:dell:latitude_5500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5500 » Version: N/A
Dell » Latitude 7300 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:latitude_7300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7300 » Version: N/A
Dell » Latitude 7400 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:latitude_7400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7400 » Version: N/A
Dell » Precision 3540 Firmware
Versions before (<) 1.10.1
cpe:2.3:o:dell:precision_3540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3540 » Version: N/A
Dell » Precision 3541 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:precision_3541_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3541 » Version: N/A
Dell » Precision 7540 Firmware
Versions before (<) 1.11.2
cpe:2.3:o:dell:precision_7540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7540 » Version: N/A
Dell » Precision 7740 Firmware
Versions before (<) 1.11.2
cpe:2.3:o:dell:precision_7740_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7740 » Version: N/A
Dell » Vostro 7590 Firmware
Versions before (<) 1.8.0
cpe:2.3:o:dell:vostro_7590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 7590 » Version: N/A
Dell » Xps 13 9380 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:xps_13_9380_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 13 9380 » Version: N/A
Dell » G3 15 3590 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:g3_15_3590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G3 15 3590 » Version: N/A
Dell » Inspiron 3493 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_3493_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3493 » Version: N/A
Dell » Inspiron 3593 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_3593_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3593 » Version: N/A
Dell » Inspiron 3793 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_3793_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3793 » Version: N/A
Dell » Inspiron 5493 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_5493_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5493 » Version: N/A
Dell » Inspiron 5498 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_5498_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5498 » Version: N/A
Dell » Inspiron 5590 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_5590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5590 » Version: N/A
Dell » Inspiron 5593 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_5593_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5593 » Version: N/A
Dell » Inspiron 5598 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_5598_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5598 » Version: N/A
Dell » Latitude 7220ex Rugged Extreme Tablet Firmware
Versions before (<) 1.9.1
cpe:2.3:o:dell:latitude_7220ex_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7220ex Rugged Extreme Tablet » Version: N/A
Dell » Precision 5540 Firmware
Versions before (<) 1.9.1
cpe:2.3:o:dell:precision_5540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 5540 » Version: N/A
Dell » Vostro 5490 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:vostro_5490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5490 » Version: N/A
Dell » Vostro 5590 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:vostro_5590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5590 » Version: N/A
Dell » Wyse 5470 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:wyse_5470_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Wyse 5470 » Version: N/A
Dell » Latitude 5300 2-in-1 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5300 2-in-1 » Version: N/A
Dell » Latitude 7200 2 In 1 Firmware
Versions before (<) 1.10.1
cpe:2.3:o:dell:latitude_7200_2_in_1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7200 2 In 1 » Version: N/A
Dell » Xps 13 9300 Firmware
Versions before (<) 1.4.1
cpe:2.3:o:dell:xps_13_9300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 13 9300 » Version: N/A
Dell » Xps 7390 2-in-1 Firmware
Versions before (<) 1.7.1
cpe:2.3:o:dell:xps_7390_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 7390 2-in-1
Dell » Xps 7590 Firmware
Versions before (<) 1.9.1
cpe:2.3:o:dell:xps_7590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 7590 » Version: N/A
Dell » Chengming 3990 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:chengming_3990_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Chengming 3990 » Version: N/A
Dell » Chengming 3991 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:chengming_3991_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Chengming 3991 » Version: N/A
Dell » G3 15 3500 Firmware
Versions before (<) 1.7.1
cpe:2.3:o:dell:g3_15_3500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G3 15 3500 » Version: N/A
Dell » Inspiron 3880 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:inspiron_3880_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3880 » Version: N/A
Dell » Inspiron 3881 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:inspiron_3881_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3881 » Version: N/A
Dell » Inspiron 7500 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:inspiron_7500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7500 » Version: N/A
Dell » Inspiron 7501 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:inspiron_7501_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7501 » Version: N/A
Dell » Latitude 3310 Firmware
Versions before (<) 1.8.3
cpe:2.3:o:dell:latitude_3310_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3310 » Version: N/A
Dell » Latitude 3310 2-in-1 Firmware
Versions before (<) 1.17.1
cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3310 2-in-1 » Version: N/A
Dell » Latitude 5310 Firmware
Versions before (<) 1.4.2
cpe:2.3:o:dell:latitude_5310_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5310 » Version: N/A
Dell » Latitude 5310 2 In 1 Firmware » Version: 1.4.2
cpe:2.3:o:dell:latitude_5310_2_in_1_firmware:1.4.2:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5310 2 In 1 » Version: N/A
Dell » Latitude 5410 Firmware
Versions before (<) 1.4.3
cpe:2.3:o:dell:latitude_5410_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5410 » Version: N/A
Dell » Latitude 5411 Firmware
Versions before (<) 1.4.3
cpe:2.3:o:dell:latitude_5411_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5411 » Version: N/A
Dell » Latitude 5511 Firmware
Versions before (<) 1.4.3
cpe:2.3:o:dell:latitude_5511_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5511 » Version: N/A
Dell » Latitude 7210 2 In 1 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:latitude_7210_2_in_1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7210 2 In 1 » Version: N/A
Dell » Latitude 7310 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:latitude_7310_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7310 » Version: N/A
Dell » Latitude 7410 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:latitude_7410_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7410 » Version: N/A
Dell » Latitude 9410 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:latitude_9410_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 9410 » Version: N/A
Dell » Latitude 9510 Firmware
Versions before (<) 1.4.2
cpe:2.3:o:dell:latitude_9510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 9510 » Version: N/A
Dell » Optiplex 3280 Aio Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:optiplex_3280_aio_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 3280 Aio » Version: N/A
Dell » Optiplex 5080 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:optiplex_5080_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 5080 » Version: N/A
Dell » Optiplex 5480 Aio Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:optiplex_5480_aio_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 5480 Aio » Version: N/A
Dell » Optiplex 7080 Firmware
Versions before (<) 1.3.10
cpe:2.3:o:dell:optiplex_7080_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 7080 » Version: N/A
Dell » Optiplex 7480 Aio Firmware
Versions before (<) 1.6.2
cpe:2.3:o:dell:optiplex_7480_aio_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 7480 Aio » Version: N/A
Dell » Optiplex 7780 Aio Firmware
Versions before (<) 1.6.2
cpe:2.3:o:dell:optiplex_7780_aio_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 7780 Aio » Version: N/A
Dell » Precision 3440 Firmware
Versions before (<) 1.3.10
cpe:2.3:o:dell:precision_3440_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3440 » Version: N/A
Dell » Precision 3550 Firmware
Versions before (<) 1.4.3
cpe:2.3:o:dell:precision_3550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3550 » Version: N/A
Dell » Precision 3551 Firmware
Versions before (<) 1.4.3
cpe:2.3:o:dell:precision_3551_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3551 » Version: N/A
Dell » Precision 3640 Tower Firmware
Versions before (<) 1.4.3
cpe:2.3:o:dell:precision_3640_tower_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3640 Tower » Version: N/A
Dell » Precision 5550 Firmware
Versions before (<) 1.6.1
cpe:2.3:o:dell:precision_5550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 5550 » Version: N/A
Dell » Vostro 3491 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:vostro_3491_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3491 » Version: N/A
Dell » Vostro 3591 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:vostro_3591_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3591 » Version: N/A
Dell » Vostro 3681 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:vostro_3681_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3681 » Version: N/A
Dell » Vostro 3881 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:vostro_3881_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3881 » Version: N/A
Dell » Vostro 3888 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:vostro_3888_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3888 » Version: N/A
Dell » Vostro 7500 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:vostro_7500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 7500 » Version: N/A
Dell » Xps 7380 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:xps_7380_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 7380 » Version: N/A
Dell » Inspiron 3501 Firmware
Versions before (<) 1.1.0
cpe:2.3:o:dell:inspiron_3501_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3501 » Version: N/A
Dell » Inspiron 5400 2-in-1 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:inspiron_5400_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5400 2-in-1 » Version: N/A
Dell » Optiplex 3080 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:optiplex_3080_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 3080 » Version: N/A
Dell » Precision 7550 Firmware
Versions before (<) 1.6.2
cpe:2.3:o:dell:precision_7550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7550 » Version: N/A
Dell » Precision 7750 Firmware
Versions before (<) 1.6.2
cpe:2.3:o:dell:precision_7750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7750 » Version: N/A
Dell » Vostro 3501 Firmware
Versions before (<) 1.1.0
cpe:2.3:o:dell:vostro_3501_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3501 » Version: N/A
Dell » Xps 17 9700 Firmware
Versions before (<) 1.6.3
cpe:2.3:o:dell:xps_17_9700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 17 9700 » Version: N/A
Dell » G3 15 5500 Firmware
Versions before (<) 1.7.1
cpe:2.3:o:dell:g3_15_5500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G3 15 5500 » Version: N/A
Dell » Inspiron 5490 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:inspiron_5490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5490 » Version: N/A
Dell » Inspiron 7391 2-in-1 Firmware
Versions before (<) 1.9.1
cpe:2.3:o:dell:inspiron_7391_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7391 2-in-1 » Version: N/A
Dell » Inspiron 7500 2-in-1 Silver Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:inspiron_7500_2-in-1_silver_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7500 2-in-1 Silver » Version: N/A
Dell » Latitude 7400 2-in-1 Firmware
Versions before (<) 1.10.0
cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7400 2-in-1 » Version: N/A
Dell » Precision 5750 Firmware
Versions before (<) 1.6.3
cpe:2.3:o:dell:precision_5750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 5750 » Version: N/A
Dell » Vostro 3401 Firmware
Versions before (<) 1.1.0
cpe:2.3:o:dell:vostro_3401_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3401 » Version: N/A
Dell » Xps 9500 Firmware
Versions before (<) 1.6.1
cpe:2.3:o:dell:xps_9500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 9500

Exploit prediction scoring system (EPSS) score for CVE-2021-36283

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 38 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-36283

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.5	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H	0.8	6.0	Dell
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-36283

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: security_alert@emc.com (Primary)

References for CVE-2021-36283

https://www.dell.com/support/kbdoc/000191495/

Access Denied
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-36283

Products affected by CVE-2021-36283

Exploit prediction scoring system (EPSS) score for CVE-2021-36283

CVSS scores for CVE-2021-36283

CWE ids for CVE-2021-36283

References for CVE-2021-36283