high8.2
CVE-2021-21522
Dell BIOS contains a Credentials Management issue.
Impact
Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Latitude 5285 2-In-1 Firmware | before 1.13.0 |
| Dell | Latitude 5289 2-In-1 Firmware | before 1.23.1 |
| Dell | Latitude 5310 2-In-1 Firmware | Version 1.7.0 |
| Dell | Latitude 5290 2-In-1 Firmware | before 1.16.0 |
| Dell | Latitude 7210 2-In-1 Firmware | before 1.7.0 |
| Dell | Latitude 7212 Rugged Extreme Tablet Firmware | before 1.33.0 Version 1.33.0 |
| Dell | Latitude 7280 Firmware | before 1.21.1 Version 1.21.1 |
| Dell | Latitude 7290 Firmware | before 1.20.0 Version 1.20.0 |
| Dell | Latitude 7285 Firmware | before 1.11.0 Version 1.11.0 |
| Dell | Latitude 7370 Firmware | before 1.24.3 Version 1.24.3 |
| Dell | Latitude 7310 Firmware | before 1.7.0 |
| Dell | Latitude 7380 Firmware | Version 1.21.1 |