CVE-2021-36343

CWE-119 — Buffer Overflow CWE-20 — Improper Input Validation3 documents3 sources

Severity

6.4MEDIUM

EPSS

0.0%

top 87.87%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

412

Dell CPG Bios Dell Alienware 13 R3 Firmware Dell Alienware 15 R3 Firmware +409 more

Timeline

PublishedJan 24

Latest updateJan 25

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 0.8 | Impact: 6.0

Affected Packages412 packages

▶CVEListV5dell/cpg_biosunspecified — 1.14

▶NVDdell/vostro_3070_firmware< 2.20.0

▶NVDdell/vostro_3267_firmware< 1.18.0

▶NVDdell/vostro_3268_firmware< 1.18.0

▶NVDdell/vostro_3400_firmware< 1.9.0

🔴Vulnerability Details

GHSA

GHSA-r5q9-m2x7-ffq7: Dell BIOS contains an improper input validation vulnerability↗2022-01-25

▶

CVEList

CVE-2021-36343: Dell BIOS contains an improper input validation vulnerability↗2022-01-24

▶