CVE-2021-21522

CWE-255CWE-522 — Insufficiently Protected Credentials3 documents3 sources
Severity
4.4MEDIUM
EPSS
0.0%
top 86.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
29
Dell CPG BiosDell Latitude 5285 2-in-1 FirmwareDell Latitude 5289 2-in-1 Firmware+26 more
Timeline
PublishedSep 28
Latest updateMay 24

Description

Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 1.5 | Impact: 6.0

Affected Packages29 packages

▶CVEListV5dell/cpg_biosunspecified — 1.13.0

🔴Vulnerability Details

2
GHSA
GHSA-pg87-v27x-wx62: Dell BIOS contains a Credentials Management issue↗2022-05-24
▶
CVEList
CVE-2021-21522: Dell BIOS contains a Credentials Management issue↗2021-09-28
▶
CVE-2021-21522 (MEDIUM CVSS 4.4) | Dell BIOS contains a Credentials Ma | cvebase.io