high7.5
CVE-2021-36283
Dell BIOS contains an improper input validation vulnerability.
Impact
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Chengming 3990 Firmware | before 1.3.1 |
| Dell | Chengming 3991 Firmware | before 1.3.1 |
| Dell | G3 15 3500 Firmware | before 1.7.1 |
| Dell | G3 15 3590 Firmware | before 1.12.0 |
| Dell | G3 15 5500 Firmware | before 1.7.1 |
| Dell | Inspiron 3493 Firmware | before 1.12.0 |
| Dell | Inspiron 3501 Firmware | before 1.1.0 |
| Dell | Inspiron 3593 Firmware | before 1.12.0 |
| Dell | Inspiron 3793 Firmware | before 1.12.0 |
| Dell | Inspiron 3880 Firmware | before 1.3.1 |
| Dell | Inspiron 3881 Firmware | before 1.3.1 |
| Dell | Inspiron 5400 2-In-1 Firmware | before 1.5.0 |