Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Related CPE's

o

dell

chengming_3990_firmware

Vulnerable

h

dell

chengming_3990

-

o

dell

chengming_3991_firmware

Vulnerable

h

dell

chengming_3991

-

o

dell

g3_15_3500_firmware

Vulnerable

h

dell

g3_15_3500

-

o

dell

g3_15_3590_firmware

Vulnerable

h

dell

g3_15_3590

-

o

dell

g3_15_5500_firmware

Vulnerable

h

dell

g3_15_5500

-

o

dell

inspiron_3493_firmware

Vulnerable

h

dell

inspiron_3493

-

o

dell

inspiron_3501_firmware

Vulnerable

h

dell

inspiron_3501

-

o

dell

inspiron_3593_firmware

Vulnerable

h

dell

inspiron_3593

-

o

dell

inspiron_3793_firmware

Vulnerable

h

dell

inspiron_3793

-

o

dell

inspiron_3880_firmware

Vulnerable

h

dell

inspiron_3880

-

o

dell

inspiron_3881_firmware

Vulnerable

h

dell

inspiron_3881

-

o

dell

inspiron_5400_2-in-1_firmware

Vulnerable

h

dell

inspiron_5400_2-in-1

-

o

dell

inspiron_5490_firmware

Vulnerable

h

dell

inspiron_5490

-

o

dell

inspiron_5493_firmware

Vulnerable

h

dell

inspiron_5493

-

o

dell

inspiron_5498_firmware

Vulnerable

h

dell

inspiron_5498

-

o

dell

inspiron_5590_firmware

Vulnerable

h

dell

inspiron_5590

-

o

dell

inspiron_5593_firmware

Vulnerable

h

dell

inspiron_5593

-

o

dell

inspiron_5598_firmware

Vulnerable

h

dell

inspiron_5598

-

o

dell

inspiron_7391_2-in-1_firmware

Vulnerable

h

dell

inspiron_7391_2-in-1

-

o

dell

inspiron_7500_firmware

Vulnerable

h

dell

inspiron_7500

-

o

dell

inspiron_7500_2-in-1_silver_firmware

Vulnerable

h

dell

inspiron_7500_2-in-1_silver

-

o

dell

inspiron_7501_firmware

Vulnerable

h

dell

inspiron_7501

-

o

dell

inspiron_7590_firmware

Vulnerable

h

dell

inspiron_7590

-

o

dell

inspiron_7591_firmware

Vulnerable

h

dell

inspiron_7591

-

o

dell

latitude_3310_firmware

Vulnerable

h

dell

latitude_3310

-

o

dell

latitude_3310_2-in-1_firmware

Vulnerable

h

dell

latitude_3310_2-in-1

-

o

dell

latitude_5300_firmware

Vulnerable

h

dell

latitude_5300

-

o

dell

latitude_5300_2-in-1_firmware

Vulnerable

h

dell

latitude_5300_2-in-1

-

o

dell

latitude_5310_firmware

Vulnerable

h

dell

latitude_5310

-

o

dell

latitude_5310_2_in_1_firmware

1.4.2

Vulnerable

h

dell

latitude_5310_2_in_1

-

o

dell

latitude_5400_firmware

Vulnerable

h

dell

latitude_5400

-

o

dell

latitude_5401_firmware

Vulnerable

h

dell

latitude_5401

-

o

dell

latitude_5410_firmware

Vulnerable

h

dell

latitude_5410

-

o

dell

latitude_5411_firmware

Vulnerable

h

dell

latitude_5411

-

o

dell

latitude_5500_firmware

Vulnerable

h

dell

latitude_5500

-

o

dell

latitude_5511_firmware

Vulnerable

h

dell

latitude_5511

-

o

dell

latitude_7200_2_in_1_firmware

Vulnerable

h

dell

latitude_7200_2_in_1

-

o

dell

latitude_7210_2_in_1_firmware

Vulnerable

h

dell

latitude_7210_2_in_1

-

o

dell

latitude_7220ex_rugged_extreme_tablet_firmware

Vulnerable

h

dell

latitude_7220ex_rugged_extreme_tablet

-

o

dell

latitude_7300_firmware

Vulnerable

h

dell

latitude_7300

-

o

dell

latitude_7310_firmware

Vulnerable

h

dell

latitude_7310

-

o

dell

latitude_7400_firmware

Vulnerable

h

dell

latitude_7400

-

o

dell

latitude_7400_2-in-1_firmware

Vulnerable

h

dell

latitude_7400_2-in-1

-

o

dell

latitude_7410_firmware

Vulnerable

h

dell

latitude_7410

-

o

dell

latitude_9410_firmware

Vulnerable

h

dell

latitude_9410

-

o

dell

latitude_9510_firmware

Vulnerable

h

dell

latitude_9510

-

o

dell

optiplex_3080_firmware

Vulnerable

h

dell

optiplex_3080

-

o

dell

optiplex_3280_aio_firmware

Vulnerable

h

dell

optiplex_3280_aio

-

o

dell

optiplex_5080_firmware

Vulnerable

h

dell

optiplex_5080

-

o

dell

optiplex_5480_aio_firmware

Vulnerable

h

dell

optiplex_5480_aio

-

o

dell

optiplex_7080_firmware

Vulnerable

h

dell

optiplex_7080

-

o

dell

optiplex_7480_aio_firmware

Vulnerable

h

dell

optiplex_7480_aio

-

o

dell

optiplex_7780_aio_firmware

Vulnerable

h

dell

optiplex_7780_aio

-

o

dell

precision_3440_firmware

Vulnerable

h

dell

precision_3440

-

o

dell

precision_3540_firmware

Vulnerable

h

dell

precision_3540

-

o

dell

precision_3541_firmware

Vulnerable

h

dell

precision_3541

-

o

dell

precision_3550_firmware

Vulnerable

h

dell

precision_3550

-

o

dell

precision_3551_firmware

Vulnerable

h

dell

precision_3551

-

o

dell

precision_3640_tower_firmware

Vulnerable

h

dell

precision_3640_tower

-

o

dell

precision_5540_firmware

Vulnerable

h

dell

precision_5540

-

o

dell

precision_5550_firmware

Vulnerable

h

dell

precision_5550

-

o

dell

precision_5750_firmware

Vulnerable

h

dell

precision_5750

-

o

dell

precision_7540_firmware

Vulnerable

h

dell

precision_7540

-

o

dell

precision_7550_firmware

Vulnerable

h

dell

precision_7550

-

o

dell

precision_7740_firmware

Vulnerable

h

dell

precision_7740

-

o

dell

precision_7750_firmware

Vulnerable

h

dell

precision_7750

-

o

dell

vostro_3401_firmware

Vulnerable

h

dell

vostro_3401

-

o

dell

vostro_3491_firmware

Vulnerable

h

dell

vostro_3491

-

o

dell

vostro_3501_firmware

Vulnerable

h

dell

vostro_3501

-

o

dell

vostro_3591_firmware

Vulnerable

h

dell

vostro_3591

-

o

dell

vostro_3681_firmware

Vulnerable

h

dell

vostro_3681

-

o

dell

vostro_3881_firmware

Vulnerable

h

dell

vostro_3881

-

o

dell

vostro_3888_firmware

Vulnerable

h

dell

vostro_3888

-

o

dell

vostro_5490_firmware

Vulnerable

h

dell

vostro_5490

-

o

dell

vostro_5590_firmware

Vulnerable

h

dell

vostro_5590

-

o

dell

vostro_7500_firmware

Vulnerable

h

dell

vostro_7500

-

o

dell

vostro_7590_firmware

Vulnerable

h

dell

vostro_7590

-

o

dell

wyse_5470_firmware

Vulnerable

h

dell

wyse_5470

-

o

dell

xps_13_9300_firmware

Vulnerable

h

dell

xps_13_9300

-

o

dell

xps_13_9380_firmware

Vulnerable

h

dell

xps_13_9380

-

o

dell

xps_17_9700_firmware

Vulnerable

h

dell

xps_17_9700

-

o

dell

xps_7380_firmware

Vulnerable

h

dell

xps_7380

-

o

dell

xps_7590_firmware

Vulnerable

h

dell

xps_7590

-

o

dell

xps_7390_2-in-1_firmware

Vulnerable

h

dell

xps_7390_2-in-1

o

dell

xps_9500_firmware

Vulnerable

h

dell

xps_9500

References

https://www.dell.com/support/kbdoc/000191495/

PatchVendor Advisory

Weaknesses

[email protected]

Primary
CWE-20

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-09-28T20:15:07.567

3 years ago

Last modified

2021-10-04T14:37:37.387

3 years ago