high7.2
CVE-2021-21572
Dell BIOSConnect feature contains a buffer overflow vulnerability.
Impact
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | before 1.3.3 |
| Dell | Chengming 3990 Firmware | before 1.4.1 |
| Dell | Chengming 3991 Firmware | before 1.4.1 |
| Dell | G15 5510 Firmware | before 1.4.0 |
| Dell | G15 5511 Firmware | before 1.3.3 |
| Dell | G3 3500 Firmware | through 1.9.0 |
| Dell | G5 5500 Firmware | before 1.9.0 |
| Dell | G7 7500 Firmware | before 1.9.0 |
| Dell | G7 7700 Firmware | before 1.9.0 |
| Dell | Inspiron 14 5418 Firmware | before 2.1.0_a06 |
| Dell | Inspiron 15 5518 Firmware | before 2.1.0_a06 |
| Dell | Inspiron 15 7510 Firmware | before 1.0.4 |