medium5.9
CVE-2021-21571
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability.
Impact
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | before 1.3.3 |
| Dell | Chengming 3990 Firmware | before 1.4.1 |
| Dell | Chengming 3991 Firmware | before 1.4.1 |
| Dell | G15 5510 Firmware | before 1.4.0 |
| Dell | G15 5511 Firmware | before 1.3.3 |
| Dell | G3 3500 Firmware | before 1.9.0 |
| Dell | G5 5500 Firmware | before 1.9.0 |
| Dell | G7 7500 Firmware | before 1.9.0 |
| Dell | G7 7700 Firmware | before 1.9.0 |
| Dell | Inspiron 14 5418 Firmware | before 2.1.0_a06 |
| Dell | Inspiron 15 5518 Firmware | before 2.1.0_a06 |
| Dell | Inspiron 15 7510 Firmware | before 1.0.4 |