CVE-2021-36283

CVSS V2 High 7.2 CVSS V3 Medium 6.7
Description
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Overview
  • CVE ID
  • CVE-2021-36283
  • Assigner
  • security_alert@emc.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2021-09-28T20:15:07
  • Last Modified Date
  • 2021-10-04T14:37:37
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:dell:chengming_3990_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:chengming_3990:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:chengming_3991_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:chengming_3991:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:g3_15_3500_firmware:*:*:*:*:*:*:*:* 1 OR 1.7.1
cpe:2.3:h:dell:g3_15_3500:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:g3_15_3590_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:g3_15_3590:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:g3_15_5500_firmware:*:*:*:*:*:*:*:* 1 OR 1.7.1
cpe:2.3:h:dell:g3_15_5500:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_3493_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_3493:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_3501_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.0
cpe:2.3:h:dell:inspiron_3501:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_3593_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_3593:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_3793_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_3793:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_3880_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:inspiron_3880:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_3881_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:inspiron_3881:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_5400_2-in-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.0
cpe:2.3:h:dell:inspiron_5400_2-in-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_5490_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_5490:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_5493_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_5493:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_5498_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_5498:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_5590_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_5590:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_5593_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_5593:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_5598_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:inspiron_5598:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_7391_2-in-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.9.1
cpe:2.3:h:dell:inspiron_7391_2-in-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_7500_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.1
cpe:2.3:h:dell:inspiron_7500:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_7500_2-in-1_silver_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.0
cpe:2.3:h:dell:inspiron_7500_2-in-1_silver:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_7501_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.1
cpe:2.3:h:dell:inspiron_7501:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_7590_firmware:*:*:*:*:*:*:*:* 1 OR 1.8.0
cpe:2.3:h:dell:inspiron_7590:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:inspiron_7591_firmware:*:*:*:*:*:*:*:* 1 OR 1.8.0
cpe:2.3:h:dell:inspiron_7591:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_3310_firmware:*:*:*:*:*:*:*:* 1 OR 1.8.3
cpe:2.3:h:dell:latitude_3310:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.17.1
cpe:2.3:h:dell:latitude_3310_2-in-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5300_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.1
cpe:2.3:h:dell:latitude_5300:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.1
cpe:2.3:h:dell:latitude_5300_2-in-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5310_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.2
cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5310_2_in_1_firmware:1.4.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* 1 OR 1.10.1
cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5401_firmware:*:*:*:*:*:*:*:* 1 OR 1.11.1
cpe:2.3:h:dell:latitude_5401:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5410_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:latitude_5410:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5411_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:latitude_5411:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5500_firmware:*:*:*:*:*:*:*:* 1 OR 1.10.1
cpe:2.3:h:dell:latitude_5500:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_5511_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:latitude_5511:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7200_2_in_1_firmware:*:*:*:*:*:*:*:* 1 OR 1.10.1
cpe:2.3:h:dell:latitude_7200_2_in_1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7210_2_in_1_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.1
cpe:2.3:h:dell:latitude_7210_2_in_1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7220ex_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* 1 OR 1.9.1
cpe:2.3:h:dell:latitude_7220ex_rugged_extreme_tablet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7300_firmware:*:*:*:*:*:*:*:* 1 OR 1.11.1
cpe:2.3:h:dell:latitude_7300:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7310_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.1
cpe:2.3:h:dell:latitude_7310:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7400_firmware:*:*:*:*:*:*:*:* 1 OR 1.11.1
cpe:2.3:h:dell:latitude_7400:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.10.0
cpe:2.3:h:dell:latitude_7400_2-in-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_7410_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.1
cpe:2.3:h:dell:latitude_7410:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_9410_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.1
cpe:2.3:h:dell:latitude_9410:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:latitude_9510_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.2
cpe:2.3:h:dell:latitude_9510:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:optiplex_3080_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:optiplex_3080:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:optiplex_3280_aio_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:optiplex_3280_aio:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:optiplex_5080_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:optiplex_5080:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:optiplex_5480_aio_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.0
cpe:2.3:h:dell:optiplex_5480_aio:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:optiplex_7080_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.10
cpe:2.3:h:dell:optiplex_7080:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:optiplex_7480_aio_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.2
cpe:2.3:h:dell:optiplex_7480_aio:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:optiplex_7780_aio_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.2
cpe:2.3:h:dell:optiplex_7780_aio:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_3440_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.10
cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_3540_firmware:*:*:*:*:*:*:*:* 1 OR 1.10.1
cpe:2.3:h:dell:precision_3540:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_3541_firmware:*:*:*:*:*:*:*:* 1 OR 1.11.1
cpe:2.3:h:dell:precision_3541:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_3550_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:precision_3550:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_3551_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:precision_3551:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_3640_tower_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:precision_3640_tower:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_5540_firmware:*:*:*:*:*:*:*:* 1 OR 1.9.1
cpe:2.3:h:dell:precision_5540:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_5550_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.1
cpe:2.3:h:dell:precision_5550:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_5750_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.3
cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_7540_firmware:*:*:*:*:*:*:*:* 1 OR 1.11.2
cpe:2.3:h:dell:precision_7540:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_7550_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.2
cpe:2.3:h:dell:precision_7550:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_7740_firmware:*:*:*:*:*:*:*:* 1 OR 1.11.2
cpe:2.3:h:dell:precision_7740:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:precision_7750_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.2
cpe:2.3:h:dell:precision_7750:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_3401_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.0
cpe:2.3:h:dell:vostro_3401:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_3491_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:vostro_3491:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_3501_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.0
cpe:2.3:h:dell:vostro_3501:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_3591_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:vostro_3591:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_3681_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:vostro_3681:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_3881_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:vostro_3881:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_3888_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.1
cpe:2.3:h:dell:vostro_3888:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_5490_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:vostro_5490:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_5590_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:vostro_5590:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_7500_firmware:*:*:*:*:*:*:*:* 1 OR 1.5.1
cpe:2.3:h:dell:vostro_7500:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:vostro_7590_firmware:*:*:*:*:*:*:*:* 1 OR 1.8.0
cpe:2.3:h:dell:vostro_7590:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:wyse_5470_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.0
cpe:2.3:h:dell:wyse_5470:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:xps_13_9300_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.1
cpe:2.3:h:dell:xps_13_9300:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:xps_13_9380_firmware:*:*:*:*:*:*:*:* 1 OR 1.12.0
cpe:2.3:h:dell:xps_13_9380:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:xps_17_9700_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.3
cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:xps_7380_firmware:*:*:*:*:*:*:*:* 1 OR 1.7.0
cpe:2.3:h:dell:xps_7380:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:xps_7590_firmware:*:*:*:*:*:*:*:* 1 OR 1.9.1
cpe:2.3:h:dell:xps_7590:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:xps_7390_2-in-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.7.1
cpe:2.3:h:dell:xps_7390_2-in-1:*:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:xps_9500_firmware:*:*:*:*:*:*:*:* 1 OR 1.6.1
cpe:2.3:h:dell:xps_9500:*:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.2
  • Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 10
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • LOCAL
  • Attack Compatibility
  • LOW
  • Privileges Required
  • HIGH
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 6.7
  • Base Severity
  • MEDIUM
  • Exploitability Score
  • 0.8
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
https://www.dell.com/support/kbdoc/000191495/ Patch Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2021-36283
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36283
History
Created Old Value New Value Data Type Notes
2022-05-10 06:52:31 Added to TrackCVE
2022-12-05 11:27:24 secure@dell.com security_alert@emc.com CVE Assigner updated
2022-12-05 11:27:24 2021-09-28T20:15Z 2021-09-28T20:15:07 CVE Published Date updated
2022-12-05 11:27:24 2021-10-04T14:37:37 CVE Modified Date updated
2022-12-05 11:27:25 Analyzed Vulnerability Status updated