{"id":"CVE-2021-36342","title":"Dell BIOS contains an improper input validation vulnerability","summary":"Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-119","CWE-20"],"vendor":"dell","product":"precision_7510_firmware","affected":["precision_7510_firmware < 1.24.3","precision_7520_firmware < 1.22.0","precision_7530_firmware < 1.18.2","precision_7540_firmware < 1.15.1","precision_7550_firmware < 1.10.1","precision_7560_firmware < 1.5.0","precision_7710_firmware < 1.24.3","precision_7720_firmware < 1.22.0","precision_7730_firmware < 1.18.2","precision_7740_firmware < 1.15.1","precision_7750_firmware < 1.10.1","precision_7760_firmware < 1.5.0","vostro_13_5370_firmware < 1.20.0","vostro_14_3468_firmware < 3.10.0","vostro_14_3478_firmware < 1.15.0","vostro_14_5468_firmware < 1.17.0","vostro_14_5471_firmware < 1.20.0","vostro_15_3568_firmware < 3.10.0","vostro_15_3572_firmware < 1.12.0","vostro_15_3578_firmware < 1.15.0","vostro_15_5410_firmware < 2.4.1","vostro_15_5510_firmware < 2.4.1","vostro_15_5568_firmware < 1.17.0","vostro_15_7570_firmware < 1.15.0","vostro_15_7580_firmware < 1.18.0","vostro_3070_firmware < 2.20.0","vostro_3267_firmware < 1.18.0","vostro_3268_firmware < 1.18.0","vostro_5502_firmware < 1.8.0","vostro_5581_firmware < 2.12.0","vostro_5590_firmware < 1.16.1","vostro_5591_firmware < 1.18.0","vostro_5880_firmware < 1.6.0","vostro_5890_firmware < 1.2.2","vostro_7500_firmware < 1.10.0","vostro_7510_firmware < 1.2.1","vostro_7590_firmware < 1.12.1","vostro_3400_firmware < 1.9.0","vostro_3401_firmware < 1.9.0","vostro_3470_firmware < 2.20.0","vostro_3471_firmware < 1.8.0","vostro_3480_firmware < 1.16.0","vostro_3481_firmware < 1.15.0","vostro_3490_firmware < 1.15.0","vostro_3500_firmware < 1.9.0","vostro_3501_firmware < 1.9.0","vostro_3510_firmware < 1.6.0","vostro_3562_firmware < 1.19.0","vostro_3580_firmware < 1.16.0","vostro_3581_firmware < 1.15.0","vostro_3582_firmware < 1.11.0","vostro_3583_firmware < 1.16.0","vostro_3584_firmware < 1.15.0","vostro_3590_firmware < 1.15.0","vostro_3660_firmware < 1.18.0","vostro_3667_firmware < 1.18.0","vostro_3668_firmware < 1.18.0","vostro_3669_firmware < 1.18.0","vostro_3670_firmware < 2.20.0","vostro_3671_firmware < 1.8.0","vostro_3681_firmware < 2.6.1","vostro_3690_firmware < 1.2.2","vostro_3881_firmware < 2.6.1","vostro_3888_firmware < 2.6.1","vostro_3890_firmware < 1.2.2","vostro_5090_firmware < 1.10.0","vostro_5300_firmware < 1.9.0","vostro_5301_firmware < 1.11.0","vostro_5310_firmware < 2.5.0","vostro_5390_firmware < 1.14.0","vostro_5391_firmware < 1.15.0","vostro_5401_firmware < 1.9.0","vostro_5402_firmware < 1.8.0","vostro_5481_firmware < 2.12.0","vostro_5490_firmware < 1.16.1","vostro_5491_firmware < 1.18.0","vostro_5501_firmware < 1.9.0","alienware_13_r3_firmware < 1.14.0","alienware_15_r3_firmware < 1.14.0","alienware_15_r4_firmware < 1.15.0","alienware_17_r4_firmware < 1.14.0","alienware_17_r5_firmware < 1.15.0","alienware_area_51m_r1_firmware < 1.16.0","alienware_area_51m_r2_firmware < 1.11.0","alienware_aurora_r11_firmware < 1.0.10","alienware_aurora_r12_firmware < 1.1.8","alienware_aurora_r8_firmware < 1.0.18","alienware_aurora_r9_firmware < 1.0.15","alienware_m15_r1_firmware < 2.10.0","alienware_m15_r2_firmware < 1.10.0","alienware_m15_r3_firmware < 1.12.0","alienware_m15_r4_firmware < 1.6.2","alienware_m17_r1_firmware < 2.10.0","alienware_m17_r2_firmware < 1.10.0","alienware_m17_r3_firmware < 1.12.0","alienware_m17_r4_firmware < 1.6.2","alienware_x15_r1_firmware < 1.5.0","alienware_x17_r1_firmware < 1.5.0","chengming_3977_firmware < 1.14.0","chengming_3980_firmware < 2.20.0"],"patched":["precision_7510_firmware 1.24.3","precision_7520_firmware 1.22.0","precision_7530_firmware 1.18.2","precision_7540_firmware 1.15.1","precision_7550_firmware 1.10.1","precision_7560_firmware 1.5.0","precision_7710_firmware 1.24.3","precision_7720_firmware 1.22.0","precision_7730_firmware 1.18.2","precision_7740_firmware 1.15.1","precision_7750_firmware 1.10.1","precision_7760_firmware 1.5.0","vostro_13_5370_firmware 1.20.0","vostro_14_3468_firmware 3.10.0","vostro_14_3478_firmware 1.15.0","vostro_14_5468_firmware 1.17.0","vostro_14_5471_firmware 1.20.0","vostro_15_3568_firmware 3.10.0","vostro_15_3572_firmware 1.12.0","vostro_15_3578_firmware 1.15.0","vostro_15_5410_firmware 2.4.1","vostro_15_5510_firmware 2.4.1","vostro_15_5568_firmware 1.17.0","vostro_15_7570_firmware 1.15.0","vostro_15_7580_firmware 1.18.0","vostro_3070_firmware 2.20.0","vostro_3267_firmware 1.18.0","vostro_3268_firmware 1.18.0","vostro_5502_firmware 1.8.0","vostro_5581_firmware 2.12.0","vostro_5590_firmware 1.16.1","vostro_5591_firmware 1.18.0","vostro_5880_firmware 1.6.0","vostro_5890_firmware 1.2.2","vostro_7500_firmware 1.10.0","vostro_7510_firmware 1.2.1","vostro_7590_firmware 1.12.1","vostro_3400_firmware 1.9.0","vostro_3401_firmware 1.9.0","vostro_3470_firmware 2.20.0","vostro_3471_firmware 1.8.0","vostro_3480_firmware 1.16.0","vostro_3481_firmware 1.15.0","vostro_3490_firmware 1.15.0","vostro_3500_firmware 1.9.0","vostro_3501_firmware 1.9.0","vostro_3510_firmware 1.6.0","vostro_3562_firmware 1.19.0","vostro_3580_firmware 1.16.0","vostro_3581_firmware 1.15.0","vostro_3582_firmware 1.11.0","vostro_3583_firmware 1.16.0","vostro_3584_firmware 1.15.0","vostro_3590_firmware 1.15.0","vostro_3660_firmware 1.18.0","vostro_3667_firmware 1.18.0","vostro_3668_firmware 1.18.0","vostro_3669_firmware 1.18.0","vostro_3670_firmware 2.20.0","vostro_3671_firmware 1.8.0","vostro_3681_firmware 2.6.1","vostro_3690_firmware 1.2.2","vostro_3881_firmware 2.6.1","vostro_3888_firmware 2.6.1","vostro_3890_firmware 1.2.2","vostro_5090_firmware 1.10.0","vostro_5300_firmware 1.9.0","vostro_5301_firmware 1.11.0","vostro_5310_firmware 2.5.0","vostro_5390_firmware 1.14.0","vostro_5391_firmware 1.15.0","vostro_5401_firmware 1.9.0","vostro_5402_firmware 1.8.0","vostro_5481_firmware 2.12.0","vostro_5490_firmware 1.16.1","vostro_5491_firmware 1.18.0","vostro_5501_firmware 1.9.0","alienware_13_r3_firmware 1.14.0","alienware_15_r3_firmware 1.14.0","alienware_15_r4_firmware 1.15.0","alienware_17_r4_firmware 1.14.0","alienware_17_r5_firmware 1.15.0","alienware_area_51m_r1_firmware 1.16.0","alienware_area_51m_r2_firmware 1.11.0","alienware_aurora_r11_firmware 1.0.10","alienware_aurora_r12_firmware 1.1.8","alienware_aurora_r8_firmware 1.0.18","alienware_aurora_r9_firmware 1.0.15","alienware_m15_r1_firmware 2.10.0","alienware_m15_r2_firmware 1.10.0","alienware_m15_r3_firmware 1.12.0","alienware_m15_r4_firmware 1.6.2","alienware_m17_r1_firmware 2.10.0","alienware_m17_r2_firmware 1.10.0","alienware_m17_r3_firmware 1.12.0","alienware_m17_r4_firmware 1.6.2","alienware_x15_r1_firmware 1.5.0","alienware_x17_r1_firmware 1.5.0","chengming_3977_firmware 1.14.0","chengming_3980_firmware 2.20.0"],"published":"2022-01-24","updated":"2026-10-07","sourceUpdated":"2026-10-07T19:17:26.480","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-36342","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240","label":"security_alert@emc.com"},{"url":"https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-07T18:48:59.560829Z"},"epss":0.00251,"epssPercentile":0.15035,"ingestedAt":"2026-10-07T19:44:15.644Z","slug":"CVE-2021-36342","body":"## Overview\n\nDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.\n\n## Affected\n\n- `precision_7510_firmware < 1.24.3`\n- `precision_7520_firmware < 1.22.0`\n- `precision_7530_firmware < 1.18.2`\n- `precision_7540_firmware < 1.15.1`\n- `precision_7550_firmware < 1.10.1`\n- `precision_7560_firmware < 1.5.0`\n- `precision_7710_firmware < 1.24.3`\n- `precision_7720_firmware < 1.22.0`\n- `precision_7730_firmware < 1.18.2`\n- `precision_7740_firmware < 1.15.1`\n- `precision_7750_firmware < 1.10.1`\n- `precision_7760_firmware < 1.5.0`\n- `vostro_13_5370_firmware < 1.20.0`\n- `vostro_14_3468_firmware < 3.10.0`\n- `vostro_14_3478_firmware < 1.15.0`\n- `vostro_14_5468_firmware < 1.17.0`\n- `vostro_14_5471_firmware < 1.20.0`\n- `vostro_15_3568_firmware < 3.10.0`\n- `vostro_15_3572_firmware < 1.12.0`\n- `vostro_15_3578_firmware < 1.15.0`\n- `vostro_15_5410_firmware < 2.4.1`\n- `vostro_15_5510_firmware < 2.4.1`\n- `vostro_15_5568_firmware < 1.17.0`\n- `vostro_15_7570_firmware < 1.15.0`\n- `vostro_15_7580_firmware < 1.18.0`\n- `vostro_3070_firmware < 2.20.0`\n- `vostro_3267_firmware < 1.18.0`\n- `vostro_3268_firmware < 1.18.0`\n- `vostro_5502_firmware < 1.8.0`\n- `vostro_5581_firmware < 2.12.0`\n- `vostro_5590_firmware < 1.16.1`\n- `vostro_5591_firmware < 1.18.0`\n- `vostro_5880_firmware < 1.6.0`\n- `vostro_5890_firmware < 1.2.2`\n- `vostro_7500_firmware < 1.10.0`\n- `vostro_7510_firmware < 1.2.1`\n- `vostro_7590_firmware < 1.12.1`\n- `vostro_3400_firmware < 1.9.0`\n- `vostro_3401_firmware < 1.9.0`\n- `vostro_3470_firmware < 2.20.0`\n- `vostro_3471_firmware < 1.8.0`\n- `vostro_3480_firmware < 1.16.0`\n- `vostro_3481_firmware < 1.15.0`\n- `vostro_3490_firmware < 1.15.0`\n- `vostro_3500_firmware < 1.9.0`\n- `vostro_3501_firmware < 1.9.0`\n- `vostro_3510_firmware < 1.6.0`\n- `vostro_3562_firmware < 1.19.0`\n- `vostro_3580_firmware < 1.16.0`\n- `vostro_3581_firmware < 1.15.0`\n- `vostro_3582_firmware < 1.11.0`\n- `vostro_3583_firmware < 1.16.0`\n- `vostro_3584_firmware < 1.15.0`\n- `vostro_3590_firmware < 1.15.0`\n- `vostro_3660_firmware < 1.18.0`\n- `vostro_3667_firmware < 1.18.0`\n- `vostro_3668_firmware < 1.18.0`\n- `vostro_3669_firmware < 1.18.0`\n- `vostro_3670_firmware < 2.20.0`\n- `vostro_3671_firmware < 1.8.0`\n- `vostro_3681_firmware < 2.6.1`\n- `vostro_3690_firmware < 1.2.2`\n- `vostro_3881_firmware < 2.6.1`\n- `vostro_3888_firmware < 2.6.1`\n- `vostro_3890_firmware < 1.2.2`\n- `vostro_5090_firmware < 1.10.0`\n- `vostro_5300_firmware < 1.9.0`\n- `vostro_5301_firmware < 1.11.0`\n- `vostro_5310_firmware < 2.5.0`\n- `vostro_5390_firmware < 1.14.0`\n- `vostro_5391_firmware < 1.15.0`\n- `vostro_5401_firmware < 1.9.0`\n- `vostro_5402_firmware < 1.8.0`\n- `vostro_5481_firmware < 2.12.0`\n- `vostro_5490_firmware < 1.16.1`\n- `vostro_5491_firmware < 1.18.0`\n- `vostro_5501_firmware < 1.9.0`\n- `alienware_13_r3_firmware < 1.14.0`\n- `alienware_15_r3_firmware < 1.14.0`\n- `alienware_15_r4_firmware < 1.15.0`\n- `alienware_17_r4_firmware < 1.14.0`\n- `alienware_17_r5_firmware < 1.15.0`\n- `alienware_area_51m_r1_firmware < 1.16.0`\n- `alienware_area_51m_r2_firmware < 1.11.0`\n- `alienware_aurora_r11_firmware < 1.0.10`\n- `alienware_aurora_r12_firmware < 1.1.8`\n- `alienware_aurora_r8_firmware < 1.0.18`\n- `alienware_aurora_r9_firmware < 1.0.15`\n- `alienware_m15_r1_firmware < 2.10.0`\n- `alienware_m15_r2_firmware < 1.10.0`\n- `alienware_m15_r3_firmware < 1.12.0`\n- `alienware_m15_r4_firmware < 1.6.2`\n- `alienware_m17_r1_firmware < 2.10.0`\n- `alienware_m17_r2_firmware < 1.10.0`\n- `alienware_m17_r3_firmware < 1.12.0`\n- `alienware_m17_r4_firmware < 1.6.2`\n- `alienware_x15_r1_firmware < 1.5.0`\n- `alienware_x17_r1_firmware < 1.5.0`\n- `chengming_3977_firmware < 1.14.0`\n- `chengming_3980_firmware < 2.20.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `precision_7510_firmware 1.24.3`\n- `precision_7520_firmware 1.22.0`\n- `precision_7530_firmware 1.18.2`\n- `precision_7540_firmware 1.15.1`\n- `precision_7550_firmware 1.10.1`\n- `precision_7560_firmware 1.5.0`\n- `precision_7710_firmware 1.24.3`\n- `precision_7720_firmware 1.22.0`\n- `precision_7730_firmware 1.18.2`\n- `precision_7740_firmware 1.15.1`\n- `precision_7750_firmware 1.10.1`\n- `precision_7760_firmware 1.5.0`\n- `vostro_13_5370_firmware 1.20.0`\n- `vostro_14_3468_firmware 3.10.0`\n- `vostro_14_3478_firmware 1.15.0`\n- `vostro_14_5468_firmware 1.17.0`\n- `vostro_14_5471_firmware 1.20.0`\n- `vostro_15_3568_firmware 3.10.0`\n- `vostro_15_3572_firmware 1.12.0`\n- `vostro_15_3578_firmware 1.15.0`\n- `vostro_15_5410_firmware 2.4.1`\n- `vostro_15_5510_firmware 2.4.1`\n- `vostro_15_5568_firmware 1.17.0`\n- `vostro_15_7570_firmware 1.15.0`\n- `vostro_15_7580_firmware 1.18.0`\n- `vostro_3070_firmware 2.20.0`\n- `vostro_3267_firmware 1.18.0`\n- `vostro_3268_firmware 1.18.0`\n- `vostro_5502_firmware 1.8.0`\n- `vostro_5581_firmware 2.12.0`\n- `vostro_5590_firmware 1.16.1`\n- `vostro_5591_firmware 1.18.0`\n- `vostro_5880_firmware 1.6.0`\n- `vostro_5890_firmware 1.2.2`\n- `vostro_7500_firmware 1.10.0`\n- `vostro_7510_firmware 1.2.1`\n- `vostro_7590_firmware 1.12.1`\n- `vostro_3400_firmware 1.9.0`\n- `vostro_3401_firmware 1.9.0`\n- `vostro_3470_firmware 2.20.0`\n- `vostro_3471_firmware 1.8.0`\n- `vostro_3480_firmware 1.16.0`\n- `vostro_3481_firmware 1.15.0`\n- `vostro_3490_firmware 1.15.0`\n- `vostro_3500_firmware 1.9.0`\n- `vostro_3501_firmware 1.9.0`\n- `vostro_3510_firmware 1.6.0`\n- `vostro_3562_firmware 1.19.0`\n- `vostro_3580_firmware 1.16.0`\n- `vostro_3581_firmware 1.15.0`\n- `vostro_3582_firmware 1.11.0`\n- `vostro_3583_firmware 1.16.0`\n- `vostro_3584_firmware 1.15.0`\n- `vostro_3590_firmware 1.15.0`\n- `vostro_3660_firmware 1.18.0`\n- `vostro_3667_firmware 1.18.0`\n- `vostro_3668_firmware 1.18.0`\n- `vostro_3669_firmware 1.18.0`\n- `vostro_3670_firmware 2.20.0`\n- `vostro_3671_firmware 1.8.0`\n- `vostro_3681_firmware 2.6.1`\n- `vostro_3690_firmware 1.2.2`\n- `vostro_3881_firmware 2.6.1`\n- `vostro_3888_firmware 2.6.1`\n- `vostro_3890_firmware 1.2.2`\n- `vostro_5090_firmware 1.10.0`\n- `vostro_5300_firmware 1.9.0`\n- `vostro_5301_firmware 1.11.0`\n- `vostro_5310_firmware 2.5.0`\n- `vostro_5390_firmware 1.14.0`\n- `vostro_5391_firmware 1.15.0`\n- `vostro_5401_firmware 1.9.0`\n- `vostro_5402_firmware 1.8.0`\n- `vostro_5481_firmware 2.12.0`\n- `vostro_5490_firmware 1.16.1`\n- `vostro_5491_firmware 1.18.0`\n- `vostro_5501_firmware 1.9.0`\n- `alienware_13_r3_firmware 1.14.0`\n- `alienware_15_r3_firmware 1.14.0`\n- `alienware_15_r4_firmware 1.15.0`\n- `alienware_17_r4_firmware 1.14.0`\n- `alienware_17_r5_firmware 1.15.0`\n- `alienware_area_51m_r1_firmware 1.16.0`\n- `alienware_area_51m_r2_firmware 1.11.0`\n- `alienware_aurora_r11_firmware 1.0.10`\n- `alienware_aurora_r12_firmware 1.1.8`\n- `alienware_aurora_r8_firmware 1.0.18`\n- `alienware_aurora_r9_firmware 1.0.15`\n- `alienware_m15_r1_firmware 2.10.0`\n- `alienware_m15_r2_firmware 1.10.0`\n- `alienware_m15_r3_firmware 1.12.0`\n- `alienware_m15_r4_firmware 1.6.2`\n- `alienware_m17_r1_firmware 2.10.0`\n- `alienware_m17_r2_firmware 1.10.0`\n- `alienware_m17_r3_firmware 1.12.0`\n- `alienware_m17_r4_firmware 1.6.2`\n- `alienware_x15_r1_firmware 1.5.0`\n- `alienware_x17_r1_firmware 1.5.0`\n- `chengming_3977_firmware 1.14.0`\n- `chengming_3980_firmware 2.20.0`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}