CVE-2021-36324High· 7.5▾ TwilightDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
alienware_13_r3_firmware < 1.13.0alienware_15_r3_firmware < 1.13.0alienware_15_r4_firmware < 1.14.0alienware_17_r4_firmware < 1.13.0alienware_17_r5_firmware < 1.14.0alienware_area_51m_r1_firmware < 1.15.1alienware_area_51m_r2_firmware < 1.10.0alienware_aurora_r11_firmware < 1.0.9alienware_aurora_r12_firmware < 1.1.7alienware_aurora_r7_firmware < 1.0.25alienware_aurora_r8_firmware < 1.0.17alienware_aurora_r9_firmware < 1.0.14alienware_aurora_ryzen_edition_firmware < 2.2.4alienware_m15_r1_firmware < 2.9.0alienware_m15_r2_firmware < 1.9.0alienware_m15_r3_firmware < 1.11.0alienware_m17_r1_firmware < 2.9.0alienware_m17_r2_firmware < 1.9.0alienware_m17_r3_firmware < 1.11.0alienware_x15_r1_firmware < 1.4.0alienware_x17_r1_firmware < 1.4.0chengming_3977_firmware < 1.13.0chengming_3980_firmware < 2.19.0chengming_3988_firmware < 1.7.0chengming_3990_firmware < 1.5.1chengming_3991_firmware < 1.5.1g3_3579_firmware < 1.17.0g3_3590_firmware < 1.14.0g3_3779_firmware < 1.17.0g5_5000_firmware < 1.3.0g5_5090_firmware < 1.9.0g5_5587_firmware < 1.17.0g5_5590_firmware < 1.16.0g7_7587_firmware < 1.17.0g7_7588_firmware <= 1.17.0g7_7590_firmware <= 1.16.0g7_7790_firmware <= 1.16.0embedded_box_pc_5000_firmware < 1.11.0inspiron_13_5378_firmware < 1.34.0inspiron_13_5379_firmware < 1.17.0inspiron_14_3467_firmware < 2.16.0inspiron_14_5468_firmware < 1.15.0inspiron_15_3567_firmware < 2.16.0inspiron_15_5566_firmware < 1.15.0inspiron_15_5578_firmware < 1.34.0inspiron_15_5579_firmware < 1.17.0inspiron_15_5582_firmware < 2.11.0inspiron_15_7570_firmware < 1.20.0inspiron_15_7572_firmware < 1.8.0inspiron_15_7573_firmware < 1.20.0inspiron_15_7577_firmware < 1.14.0inspiron_17_7773_firmware < 1.17.0inspiron_3268_firmware < 1.17.1inspiron_3277_firmware < 1.16.0inspiron_3280_firmware < 1.12.0inspiron_3470_firmware < 2.19.0inspiron_3471_firmware < 1.7.0inspiron_3476_firmware < 1.14.0inspiron_3477_firmware < 1.16.0inspiron_3480_firmware < 1.15.0inspiron_3480_firmware < 1.12.0inspiron_3481_firmware < 1.14.0inspiron_3576_firmware < 1.14.0inspiron_3580_firmware < 1.15.0inspiron_3581_firmware < 1.14.0inspiron_3668_firmware < 1.17.1inspiron_3670_firmware < 2.19.0inspiron_3671_firmware < 1.7.0inspiron_3780_firmware < 1.15.0inspiron_3781_firmware < 1.14.0inspiron_3880_firmware < 1.5.1inspiron_3881_firmware < 1.5.1inspiron_5370_firmware < 1.19.0inspiron_5400_firmware < 1.5.2inspiron_5401_firmware < 1.5.2inspiron_5477_firmware < 1.2.15inspiron_5480_firmware < 2.11.0inspiron_5481_firmware < 2.11.0inspiron_5482_firmware < 2.11.0inspiron_5490_firmware < 1.10.0inspiron_5570_firmware < 1.6.0inspiron_5580_firmware < 2.11.0inspiron_5680_firmware < 2.7.0inspiron_5770_firmware < 1.6.0inspiron_7370_firmware < 1.20.0inspiron_7373_firmware < 1.20.0inspiron_7380_firmware < 1.14.0inspiron_7386_firmware < 1.11.0inspiron_7467_firmware < 1.15.0inspiron_7472_firmware < 1.8.0inspiron_7567_firmware < 1.15.0inspiron_7580_firmware < 1.14.0inspiron_7586_firmware < 1.11.0inspiron_7590_firmware < 1.11.0inspiron_7591_firmware < 1.11.0inspiron_7700_firmware < 1.5.2inspiron_7777_firmware < 1.2.15inspiron_7786_firmware < 1.11.0inspiron_7790_firmware < 1.10.0inspiron_5491_firmware < 1.10.0Upgrade past the affected range:
alienware_13_r3_firmware 1.13.0alienware_15_r3_firmware 1.13.0alienware_15_r4_firmware 1.14.0alienware_17_r4_firmware 1.13.0alienware_17_r5_firmware 1.14.0alienware_area_51m_r1_firmware 1.15.1alienware_area_51m_r2_firmware 1.10.0alienware_aurora_r11_firmware 1.0.9alienware_aurora_r12_firmware 1.1.7alienware_aurora_r7_firmware 1.0.25alienware_aurora_r8_firmware 1.0.17alienware_aurora_r9_firmware 1.0.14alienware_aurora_ryzen_edition_firmware 2.2.4alienware_m15_r1_firmware 2.9.0alienware_m15_r2_firmware 1.9.0alienware_m15_r3_firmware 1.11.0alienware_m17_r1_firmware 2.9.0alienware_m17_r2_firmware 1.9.0alienware_m17_r3_firmware 1.11.0alienware_x15_r1_firmware 1.4.0alienware_x17_r1_firmware 1.4.0chengming_3977_firmware 1.13.0chengming_3980_firmware 2.19.0chengming_3988_firmware 1.7.0chengming_3990_firmware 1.5.1chengming_3991_firmware 1.5.1g3_3579_firmware 1.17.0g3_3590_firmware 1.14.0g3_3779_firmware 1.17.0g5_5000_firmware 1.3.0g5_5090_firmware 1.9.0g5_5587_firmware 1.17.0g5_5590_firmware 1.16.0g7_7587_firmware 1.17.0embedded_box_pc_5000_firmware 1.11.0inspiron_13_5378_firmware 1.34.0inspiron_13_5379_firmware 1.17.0inspiron_14_3467_firmware 2.16.0inspiron_14_5468_firmware 1.15.0inspiron_15_3567_firmware 2.16.0inspiron_15_5566_firmware 1.15.0inspiron_15_5578_firmware 1.34.0inspiron_15_5579_firmware 1.17.0inspiron_15_5582_firmware 2.11.0inspiron_15_7570_firmware 1.20.0inspiron_15_7572_firmware 1.8.0inspiron_15_7573_firmware 1.20.0inspiron_15_7577_firmware 1.14.0inspiron_17_7773_firmware 1.17.0inspiron_3268_firmware 1.17.1inspiron_3277_firmware 1.16.0inspiron_3280_firmware 1.12.0inspiron_3470_firmware 2.19.0inspiron_3471_firmware 1.7.0inspiron_3476_firmware 1.14.0inspiron_3477_firmware 1.16.0inspiron_3480_firmware 1.12.0inspiron_3481_firmware 1.14.0inspiron_3576_firmware 1.14.0inspiron_3580_firmware 1.15.0inspiron_3581_firmware 1.14.0inspiron_3668_firmware 1.17.1inspiron_3670_firmware 2.19.0inspiron_3671_firmware 1.7.0inspiron_3780_firmware 1.15.0inspiron_3781_firmware 1.14.0inspiron_3880_firmware 1.5.1inspiron_3881_firmware 1.5.1inspiron_5370_firmware 1.19.0inspiron_5400_firmware 1.5.2inspiron_5401_firmware 1.5.2inspiron_5477_firmware 1.2.15inspiron_5480_firmware 2.11.0inspiron_5481_firmware 2.11.0inspiron_5482_firmware 2.11.0inspiron_5490_firmware 1.10.0inspiron_5570_firmware 1.6.0inspiron_5580_firmware 2.11.0inspiron_5680_firmware 2.7.0inspiron_5770_firmware 1.6.0inspiron_7370_firmware 1.20.0inspiron_7373_firmware 1.20.0inspiron_7380_firmware 1.14.0inspiron_7386_firmware 1.11.0inspiron_7467_firmware 1.15.0inspiron_7472_firmware 1.8.0inspiron_7567_firmware 1.15.0inspiron_7580_firmware 1.14.0inspiron_7586_firmware 1.11.0inspiron_7590_firmware 1.11.0inspiron_7591_firmware 1.11.0inspiron_7700_firmware 1.5.2inspiron_7777_firmware 1.2.15inspiron_7786_firmware 1.11.0inspiron_7790_firmware 1.10.0inspiron_5491_firmware 1.10.0Connected by shared product, vendor, weakness, or advisory.
CVE-2021-36325High· 7.5Dell BIOS contains an improper input validation vulnerability
CVE-2021-36323High· 7.5Dell BIOS contains an improper input validation vulnerability
CVE-2021-36342High· 7.5Dell BIOS contains an improper input validation vulnerability
CVE-2021-36343High· 7.5Dell BIOS contains an improper input validation vulnerability
CVE-2021-45105Medium· 5.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
CVE-2020-3478High· 8.1A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device