--- id: CVE-2021-36342 title: Dell BIOS contains an improper input validation vulnerability summary: >- Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. severity: high cvss: 7.5 cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H' cwe: - CWE-119 - CWE-20 vendor: dell product: precision_7510_firmware affected: - precision_7510_firmware < 1.24.3 - precision_7520_firmware < 1.22.0 - precision_7530_firmware < 1.18.2 - precision_7540_firmware < 1.15.1 - precision_7550_firmware < 1.10.1 - precision_7560_firmware < 1.5.0 - precision_7710_firmware < 1.24.3 - precision_7720_firmware < 1.22.0 - precision_7730_firmware < 1.18.2 - precision_7740_firmware < 1.15.1 - precision_7750_firmware < 1.10.1 - precision_7760_firmware < 1.5.0 - vostro_13_5370_firmware < 1.20.0 - vostro_14_3468_firmware < 3.10.0 - vostro_14_3478_firmware < 1.15.0 - vostro_14_5468_firmware < 1.17.0 - vostro_14_5471_firmware < 1.20.0 - vostro_15_3568_firmware < 3.10.0 - vostro_15_3572_firmware < 1.12.0 - vostro_15_3578_firmware < 1.15.0 - vostro_15_5410_firmware < 2.4.1 - vostro_15_5510_firmware < 2.4.1 - vostro_15_5568_firmware < 1.17.0 - vostro_15_7570_firmware < 1.15.0 - vostro_15_7580_firmware < 1.18.0 - vostro_3070_firmware < 2.20.0 - vostro_3267_firmware < 1.18.0 - vostro_3268_firmware < 1.18.0 - vostro_5502_firmware < 1.8.0 - vostro_5581_firmware < 2.12.0 - vostro_5590_firmware < 1.16.1 - vostro_5591_firmware < 1.18.0 - vostro_5880_firmware < 1.6.0 - vostro_5890_firmware < 1.2.2 - vostro_7500_firmware < 1.10.0 - vostro_7510_firmware < 1.2.1 - vostro_7590_firmware < 1.12.1 - vostro_3400_firmware < 1.9.0 - vostro_3401_firmware < 1.9.0 - vostro_3470_firmware < 2.20.0 - vostro_3471_firmware < 1.8.0 - vostro_3480_firmware < 1.16.0 - vostro_3481_firmware < 1.15.0 - vostro_3490_firmware < 1.15.0 - vostro_3500_firmware < 1.9.0 - vostro_3501_firmware < 1.9.0 - vostro_3510_firmware < 1.6.0 - vostro_3562_firmware < 1.19.0 - vostro_3580_firmware < 1.16.0 - vostro_3581_firmware < 1.15.0 - vostro_3582_firmware < 1.11.0 - vostro_3583_firmware < 1.16.0 - vostro_3584_firmware < 1.15.0 - vostro_3590_firmware < 1.15.0 - vostro_3660_firmware < 1.18.0 - vostro_3667_firmware < 1.18.0 - vostro_3668_firmware < 1.18.0 - vostro_3669_firmware < 1.18.0 - vostro_3670_firmware < 2.20.0 - vostro_3671_firmware < 1.8.0 - vostro_3681_firmware < 2.6.1 - vostro_3690_firmware < 1.2.2 - vostro_3881_firmware < 2.6.1 - vostro_3888_firmware < 2.6.1 - vostro_3890_firmware < 1.2.2 - vostro_5090_firmware < 1.10.0 - vostro_5300_firmware < 1.9.0 - vostro_5301_firmware < 1.11.0 - vostro_5310_firmware < 2.5.0 - vostro_5390_firmware < 1.14.0 - vostro_5391_firmware < 1.15.0 - vostro_5401_firmware < 1.9.0 - vostro_5402_firmware < 1.8.0 - vostro_5481_firmware < 2.12.0 - vostro_5490_firmware < 1.16.1 - vostro_5491_firmware < 1.18.0 - vostro_5501_firmware < 1.9.0 - alienware_13_r3_firmware < 1.14.0 - alienware_15_r3_firmware < 1.14.0 - alienware_15_r4_firmware < 1.15.0 - alienware_17_r4_firmware < 1.14.0 - alienware_17_r5_firmware < 1.15.0 - alienware_area_51m_r1_firmware < 1.16.0 - alienware_area_51m_r2_firmware < 1.11.0 - alienware_aurora_r11_firmware < 1.0.10 - alienware_aurora_r12_firmware < 1.1.8 - alienware_aurora_r8_firmware < 1.0.18 - alienware_aurora_r9_firmware < 1.0.15 - alienware_m15_r1_firmware < 2.10.0 - alienware_m15_r2_firmware < 1.10.0 - alienware_m15_r3_firmware < 1.12.0 - alienware_m15_r4_firmware < 1.6.2 - alienware_m17_r1_firmware < 2.10.0 - alienware_m17_r2_firmware < 1.10.0 - alienware_m17_r3_firmware < 1.12.0 - alienware_m17_r4_firmware < 1.6.2 - alienware_x15_r1_firmware < 1.5.0 - alienware_x17_r1_firmware < 1.5.0 - chengming_3977_firmware < 1.14.0 - chengming_3980_firmware < 2.20.0 patched: - precision_7510_firmware 1.24.3 - precision_7520_firmware 1.22.0 - precision_7530_firmware 1.18.2 - precision_7540_firmware 1.15.1 - precision_7550_firmware 1.10.1 - precision_7560_firmware 1.5.0 - precision_7710_firmware 1.24.3 - precision_7720_firmware 1.22.0 - precision_7730_firmware 1.18.2 - precision_7740_firmware 1.15.1 - precision_7750_firmware 1.10.1 - precision_7760_firmware 1.5.0 - vostro_13_5370_firmware 1.20.0 - vostro_14_3468_firmware 3.10.0 - vostro_14_3478_firmware 1.15.0 - vostro_14_5468_firmware 1.17.0 - vostro_14_5471_firmware 1.20.0 - vostro_15_3568_firmware 3.10.0 - vostro_15_3572_firmware 1.12.0 - vostro_15_3578_firmware 1.15.0 - vostro_15_5410_firmware 2.4.1 - vostro_15_5510_firmware 2.4.1 - vostro_15_5568_firmware 1.17.0 - vostro_15_7570_firmware 1.15.0 - vostro_15_7580_firmware 1.18.0 - vostro_3070_firmware 2.20.0 - vostro_3267_firmware 1.18.0 - vostro_3268_firmware 1.18.0 - vostro_5502_firmware 1.8.0 - vostro_5581_firmware 2.12.0 - vostro_5590_firmware 1.16.1 - vostro_5591_firmware 1.18.0 - vostro_5880_firmware 1.6.0 - vostro_5890_firmware 1.2.2 - vostro_7500_firmware 1.10.0 - vostro_7510_firmware 1.2.1 - vostro_7590_firmware 1.12.1 - vostro_3400_firmware 1.9.0 - vostro_3401_firmware 1.9.0 - vostro_3470_firmware 2.20.0 - vostro_3471_firmware 1.8.0 - vostro_3480_firmware 1.16.0 - vostro_3481_firmware 1.15.0 - vostro_3490_firmware 1.15.0 - vostro_3500_firmware 1.9.0 - vostro_3501_firmware 1.9.0 - vostro_3510_firmware 1.6.0 - vostro_3562_firmware 1.19.0 - vostro_3580_firmware 1.16.0 - vostro_3581_firmware 1.15.0 - vostro_3582_firmware 1.11.0 - vostro_3583_firmware 1.16.0 - vostro_3584_firmware 1.15.0 - vostro_3590_firmware 1.15.0 - vostro_3660_firmware 1.18.0 - vostro_3667_firmware 1.18.0 - vostro_3668_firmware 1.18.0 - vostro_3669_firmware 1.18.0 - vostro_3670_firmware 2.20.0 - vostro_3671_firmware 1.8.0 - vostro_3681_firmware 2.6.1 - vostro_3690_firmware 1.2.2 - vostro_3881_firmware 2.6.1 - vostro_3888_firmware 2.6.1 - vostro_3890_firmware 1.2.2 - vostro_5090_firmware 1.10.0 - vostro_5300_firmware 1.9.0 - vostro_5301_firmware 1.11.0 - vostro_5310_firmware 2.5.0 - vostro_5390_firmware 1.14.0 - vostro_5391_firmware 1.15.0 - vostro_5401_firmware 1.9.0 - vostro_5402_firmware 1.8.0 - vostro_5481_firmware 2.12.0 - vostro_5490_firmware 1.16.1 - vostro_5491_firmware 1.18.0 - vostro_5501_firmware 1.9.0 - alienware_13_r3_firmware 1.14.0 - alienware_15_r3_firmware 1.14.0 - alienware_15_r4_firmware 1.15.0 - alienware_17_r4_firmware 1.14.0 - alienware_17_r5_firmware 1.15.0 - alienware_area_51m_r1_firmware 1.16.0 - alienware_area_51m_r2_firmware 1.11.0 - alienware_aurora_r11_firmware 1.0.10 - alienware_aurora_r12_firmware 1.1.8 - alienware_aurora_r8_firmware 1.0.18 - alienware_aurora_r9_firmware 1.0.15 - alienware_m15_r1_firmware 2.10.0 - alienware_m15_r2_firmware 1.10.0 - alienware_m15_r3_firmware 1.12.0 - alienware_m15_r4_firmware 1.6.2 - alienware_m17_r1_firmware 2.10.0 - alienware_m17_r2_firmware 1.10.0 - alienware_m17_r3_firmware 1.12.0 - alienware_m17_r4_firmware 1.6.2 - alienware_x15_r1_firmware 1.5.0 - alienware_x17_r1_firmware 1.5.0 - chengming_3977_firmware 1.14.0 - chengming_3980_firmware 2.20.0 published: '2022-01-24' updated: '2026-10-07' sourceUpdated: '2026-10-07T19:17:26.480' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2021-36342' references: - url: 'https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240' label: security_alert@emc.com - url: 'https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240' label: af854a3a-2127-422b-91ae-364da2661108 tags: - nvd - cve.org ssvc: exploitation: none automatable: 'no' technicalImpact: partial timestamp: '2026-10-07T18:48:59.560829Z' epss: 0.00251 epssPercentile: 0.15035 ingestedAt: '2026-10-07T19:44:15.644Z' --- ## Overview Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. ## Affected - `precision_7510_firmware < 1.24.3` - `precision_7520_firmware < 1.22.0` - `precision_7530_firmware < 1.18.2` - `precision_7540_firmware < 1.15.1` - `precision_7550_firmware < 1.10.1` - `precision_7560_firmware < 1.5.0` - `precision_7710_firmware < 1.24.3` - `precision_7720_firmware < 1.22.0` - `precision_7730_firmware < 1.18.2` - `precision_7740_firmware < 1.15.1` - `precision_7750_firmware < 1.10.1` - `precision_7760_firmware < 1.5.0` - `vostro_13_5370_firmware < 1.20.0` - `vostro_14_3468_firmware < 3.10.0` - `vostro_14_3478_firmware < 1.15.0` - `vostro_14_5468_firmware < 1.17.0` - `vostro_14_5471_firmware < 1.20.0` - `vostro_15_3568_firmware < 3.10.0` - `vostro_15_3572_firmware < 1.12.0` - `vostro_15_3578_firmware < 1.15.0` - `vostro_15_5410_firmware < 2.4.1` - `vostro_15_5510_firmware < 2.4.1` - `vostro_15_5568_firmware < 1.17.0` - `vostro_15_7570_firmware < 1.15.0` - `vostro_15_7580_firmware < 1.18.0` - `vostro_3070_firmware < 2.20.0` - `vostro_3267_firmware < 1.18.0` - `vostro_3268_firmware < 1.18.0` - `vostro_5502_firmware < 1.8.0` - `vostro_5581_firmware < 2.12.0` - `vostro_5590_firmware < 1.16.1` - `vostro_5591_firmware < 1.18.0` - `vostro_5880_firmware < 1.6.0` - `vostro_5890_firmware < 1.2.2` - `vostro_7500_firmware < 1.10.0` - `vostro_7510_firmware < 1.2.1` - `vostro_7590_firmware < 1.12.1` - `vostro_3400_firmware < 1.9.0` - `vostro_3401_firmware < 1.9.0` - `vostro_3470_firmware < 2.20.0` - `vostro_3471_firmware < 1.8.0` - `vostro_3480_firmware < 1.16.0` - `vostro_3481_firmware < 1.15.0` - `vostro_3490_firmware < 1.15.0` - `vostro_3500_firmware < 1.9.0` - `vostro_3501_firmware < 1.9.0` - `vostro_3510_firmware < 1.6.0` - `vostro_3562_firmware < 1.19.0` - `vostro_3580_firmware < 1.16.0` - `vostro_3581_firmware < 1.15.0` - `vostro_3582_firmware < 1.11.0` - `vostro_3583_firmware < 1.16.0` - `vostro_3584_firmware < 1.15.0` - `vostro_3590_firmware < 1.15.0` - `vostro_3660_firmware < 1.18.0` - `vostro_3667_firmware < 1.18.0` - `vostro_3668_firmware < 1.18.0` - `vostro_3669_firmware < 1.18.0` - `vostro_3670_firmware < 2.20.0` - `vostro_3671_firmware < 1.8.0` - `vostro_3681_firmware < 2.6.1` - `vostro_3690_firmware < 1.2.2` - `vostro_3881_firmware < 2.6.1` - `vostro_3888_firmware < 2.6.1` - `vostro_3890_firmware < 1.2.2` - `vostro_5090_firmware < 1.10.0` - `vostro_5300_firmware < 1.9.0` - `vostro_5301_firmware < 1.11.0` - `vostro_5310_firmware < 2.5.0` - `vostro_5390_firmware < 1.14.0` - `vostro_5391_firmware < 1.15.0` - `vostro_5401_firmware < 1.9.0` - `vostro_5402_firmware < 1.8.0` - `vostro_5481_firmware < 2.12.0` - `vostro_5490_firmware < 1.16.1` - `vostro_5491_firmware < 1.18.0` - `vostro_5501_firmware < 1.9.0` - `alienware_13_r3_firmware < 1.14.0` - `alienware_15_r3_firmware < 1.14.0` - `alienware_15_r4_firmware < 1.15.0` - `alienware_17_r4_firmware < 1.14.0` - `alienware_17_r5_firmware < 1.15.0` - `alienware_area_51m_r1_firmware < 1.16.0` - `alienware_area_51m_r2_firmware < 1.11.0` - `alienware_aurora_r11_firmware < 1.0.10` - `alienware_aurora_r12_firmware < 1.1.8` - `alienware_aurora_r8_firmware < 1.0.18` - `alienware_aurora_r9_firmware < 1.0.15` - `alienware_m15_r1_firmware < 2.10.0` - `alienware_m15_r2_firmware < 1.10.0` - `alienware_m15_r3_firmware < 1.12.0` - `alienware_m15_r4_firmware < 1.6.2` - `alienware_m17_r1_firmware < 2.10.0` - `alienware_m17_r2_firmware < 1.10.0` - `alienware_m17_r3_firmware < 1.12.0` - `alienware_m17_r4_firmware < 1.6.2` - `alienware_x15_r1_firmware < 1.5.0` - `alienware_x17_r1_firmware < 1.5.0` - `chengming_3977_firmware < 1.14.0` - `chengming_3980_firmware < 2.20.0` ## Remediation Upgrade past the affected range: - `precision_7510_firmware 1.24.3` - `precision_7520_firmware 1.22.0` - `precision_7530_firmware 1.18.2` - `precision_7540_firmware 1.15.1` - `precision_7550_firmware 1.10.1` - `precision_7560_firmware 1.5.0` - `precision_7710_firmware 1.24.3` - `precision_7720_firmware 1.22.0` - `precision_7730_firmware 1.18.2` - `precision_7740_firmware 1.15.1` - `precision_7750_firmware 1.10.1` - `precision_7760_firmware 1.5.0` - `vostro_13_5370_firmware 1.20.0` - `vostro_14_3468_firmware 3.10.0` - `vostro_14_3478_firmware 1.15.0` - `vostro_14_5468_firmware 1.17.0` - `vostro_14_5471_firmware 1.20.0` - `vostro_15_3568_firmware 3.10.0` - `vostro_15_3572_firmware 1.12.0` - `vostro_15_3578_firmware 1.15.0` - `vostro_15_5410_firmware 2.4.1` - `vostro_15_5510_firmware 2.4.1` - `vostro_15_5568_firmware 1.17.0` - `vostro_15_7570_firmware 1.15.0` - `vostro_15_7580_firmware 1.18.0` - `vostro_3070_firmware 2.20.0` - `vostro_3267_firmware 1.18.0` - `vostro_3268_firmware 1.18.0` - `vostro_5502_firmware 1.8.0` - `vostro_5581_firmware 2.12.0` - `vostro_5590_firmware 1.16.1` - `vostro_5591_firmware 1.18.0` - `vostro_5880_firmware 1.6.0` - `vostro_5890_firmware 1.2.2` - `vostro_7500_firmware 1.10.0` - `vostro_7510_firmware 1.2.1` - `vostro_7590_firmware 1.12.1` - `vostro_3400_firmware 1.9.0` - `vostro_3401_firmware 1.9.0` - `vostro_3470_firmware 2.20.0` - `vostro_3471_firmware 1.8.0` - `vostro_3480_firmware 1.16.0` - `vostro_3481_firmware 1.15.0` - `vostro_3490_firmware 1.15.0` - `vostro_3500_firmware 1.9.0` - `vostro_3501_firmware 1.9.0` - `vostro_3510_firmware 1.6.0` - `vostro_3562_firmware 1.19.0` - `vostro_3580_firmware 1.16.0` - `vostro_3581_firmware 1.15.0` - `vostro_3582_firmware 1.11.0` - `vostro_3583_firmware 1.16.0` - `vostro_3584_firmware 1.15.0` - `vostro_3590_firmware 1.15.0` - `vostro_3660_firmware 1.18.0` - `vostro_3667_firmware 1.18.0` - `vostro_3668_firmware 1.18.0` - `vostro_3669_firmware 1.18.0` - `vostro_3670_firmware 2.20.0` - `vostro_3671_firmware 1.8.0` - `vostro_3681_firmware 2.6.1` - `vostro_3690_firmware 1.2.2` - `vostro_3881_firmware 2.6.1` - `vostro_3888_firmware 2.6.1` - `vostro_3890_firmware 1.2.2` - `vostro_5090_firmware 1.10.0` - `vostro_5300_firmware 1.9.0` - `vostro_5301_firmware 1.11.0` - `vostro_5310_firmware 2.5.0` - `vostro_5390_firmware 1.14.0` - `vostro_5391_firmware 1.15.0` - `vostro_5401_firmware 1.9.0` - `vostro_5402_firmware 1.8.0` - `vostro_5481_firmware 2.12.0` - `vostro_5490_firmware 1.16.1` - `vostro_5491_firmware 1.18.0` - `vostro_5501_firmware 1.9.0` - `alienware_13_r3_firmware 1.14.0` - `alienware_15_r3_firmware 1.14.0` - `alienware_15_r4_firmware 1.15.0` - `alienware_17_r4_firmware 1.14.0` - `alienware_17_r5_firmware 1.15.0` - `alienware_area_51m_r1_firmware 1.16.0` - `alienware_area_51m_r2_firmware 1.11.0` - `alienware_aurora_r11_firmware 1.0.10` - `alienware_aurora_r12_firmware 1.1.8` - `alienware_aurora_r8_firmware 1.0.18` - `alienware_aurora_r9_firmware 1.0.15` - `alienware_m15_r1_firmware 2.10.0` - `alienware_m15_r2_firmware 1.10.0` - `alienware_m15_r3_firmware 1.12.0` - `alienware_m15_r4_firmware 1.6.2` - `alienware_m17_r1_firmware 2.10.0` - `alienware_m17_r2_firmware 1.10.0` - `alienware_m17_r3_firmware 1.12.0` - `alienware_m17_r4_firmware 1.6.2` - `alienware_x15_r1_firmware 1.5.0` - `alienware_x17_r1_firmware 1.5.0` - `chengming_3977_firmware 1.14.0` - `chengming_3980_firmware 2.20.0`