Description

Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.

Related CPE's

o

dell

latitude_5285_2-in-1_firmware

Vulnerable

h

dell

latitude_5285_2-in-1

o

dell

latitude_5289_2-in-1_firmware

Vulnerable

h

dell

latitude_5289_2-in-1

o

dell

latitude_5310_2-in-1_firmware

1.7.0

Vulnerable

h

dell

latitude_5310_2-in-1

o

dell

latitude_5290_2-in-1_firmware

Vulnerable

h

dell

latitude_5290_2-in-1

o

dell

latitude_7210_2-in-1_firmware

Vulnerable

h

dell

latitude_7210_2-in-1

-

o

dell

latitude_7212_rugged_extreme_tablet_firmware

2

h

dell

latitude_7212_rugged_extreme_tablet

-

o

dell

latitude_7280_firmware

2

h

dell

latitude_7280

-

o

dell

latitude_7290_firmware

2

h

dell

latitude_7290

-

o

dell

latitude_7285_firmware

2

h

dell

latitude_7285

-

o

dell

latitude_7370_firmware

2

h

dell

latitude_7370

-

o

dell

latitude_7310_firmware

Vulnerable

h

dell

latitude_7310

-

o

dell

latitude_7380_firmware

1.21.1

Vulnerable

h

dell

latitude_7380

-

o

dell

latitude_7389_firmware

Vulnerable

h

dell

latitude_7389

-

o

dell

latitude_7390_firmware

1.20.0

Vulnerable

h

dell

latitude_7390

-

o

dell

latitude_7410_firmware

Vulnerable

h

dell

latitude_7410

-

o

dell

latitude_7390_2-in-1_firmware

Vulnerable

h

dell

latitude_7390_2-in-1

-

o

dell

latitude_7420_firmware

Vulnerable

h

dell

latitude_7420

-

o

dell

latitude_7480_firmware

Vulnerable

h

dell

latitude_7480

-

o

dell

latitude_7490_firmware

Vulnerable

h

dell

latitude_7490

-

o

dell

latitude_9410_firmware

Vulnerable

h

dell

latitude_9410

-

o

dell

latitude_9510_firmware

Vulnerable

h

dell

latitude_9510

-

o

dell

precision_3640_tower_firmware

Vulnerable

h

dell

precision_3640_tower

-

o

dell

precision_5520_firmware

Vulnerable

h

dell

precision_5520

-

o

dell

precision_5510_firmware

Vulnerable

h

dell

precision_5510

-

o

dell

precision_5530_2-in-1_firmware

Vulnerable

h

dell

precision_5530_2-in-1

-

o

dell

xps_13_9360_firmware

Vulnerable

h

dell

xps_13_9360

-

o

dell

xps_13_9370_firmware

Vulnerable

h

dell

xps_13_9370

-

o

dell

xps_15_9575_2-in-1_firmware

Vulnerable

h

dell

xps_15_9575_2-in-1

-

References

https://www.dell.com/support/kbdoc/000191495

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-noinfo

[email protected]

Secondary
CWE-255

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.4 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-09-28T20:15:07.397

3 years ago

Last modified

2023-06-30T17:51:46.287

2 years ago