CVE-2021-36283: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…

PriorityP429medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.24%

15.2th percentile

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected

86 ranges· showing 25

Vendor	Product	Version range	Fixed in
dell	chengming_3990_firmware	< 1.3.1	1.3.1
dell	chengming_3991_firmware	< 1.3.1	1.3.1
dell	cpg_bios	>= unspecified < 1.3.1	1.3.1
dell	g3_15_3500_firmware	< 1.7.1	1.7.1
dell	g3_15_3590_firmware	< 1.12.0	1.12.0
dell	g3_15_5500_firmware	< 1.7.1	1.7.1
dell	inspiron_3493_firmware	< 1.12.0	1.12.0
dell	inspiron_3501_firmware	< 1.1.0	1.1.0
dell	inspiron_3593_firmware	< 1.12.0	1.12.0
dell	inspiron_3793_firmware	< 1.12.0	1.12.0
dell	inspiron_3880_firmware	< 1.3.1	1.3.1
dell	inspiron_3881_firmware	< 1.3.1	1.3.1
dell	inspiron_5400_2-in-1_firmware	< 1.5.0	1.5.0
dell	inspiron_5490_firmware	< 1.12.0	1.12.0
dell	inspiron_5493_firmware	< 1.12.0	1.12.0
dell	inspiron_5498_firmware	< 1.12.0	1.12.0
dell	inspiron_5590_firmware	< 1.12.0	1.12.0
dell	inspiron_5593_firmware	< 1.12.0	1.12.0
dell	inspiron_5598_firmware	< 1.12.0	1.12.0
dell	inspiron_7391_2-in-1_firmware	< 1.9.1	1.9.1
dell	inspiron_7500_2-in-1_silver_firmware	< 1.5.0	1.5.0
dell	inspiron_7500_firmware	< 1.5.1	1.5.1
dell	inspiron_7501_firmware	< 1.5.1	1.5.1
dell	inspiron_7590_firmware	< 1.8.0	1.8.0
dell	inspiron_7591_firmware	< 1.8.0	1.8.0

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.