medium5.7
CVE-2021-36285
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability.
Impact
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Latitude 5310 2-In-1 Firmware | before 1.7.0 |
| Dell | Latitude 5320 Firmware | before 1.7.0 |
| Dell | Latitude 5400 Firmware | before 1.7.1 |
| Dell | Latitude 5411 Firmware | before 1.6.0 |
| Dell | Latitude 5500 Firmware | before 1.8.0 |
| Dell | Latitude 5520 Firmware | before 1.6.0 |
| Dell | Latitude 5511 Firmware | before 1.7.1 |
| Dell | Latitude 7212 Rugged Extreme Tablet Firmware | before 1.7.0 |
| Dell | Latitude 7280 Firmware | before 1.9.1 |
| Dell | Latitude 7320 Firmware | before 1.7.0 |
| Dell | Latitude 7370 Firmware | before 1.7.1 |
| Dell | Latitude 7420 Firmware | before 1.7.0 |