CVE-2021-36342

high-risk

Published 2022-01-24

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

LOCAL / HIGH complexity

Affected Products (20)

Precision 7510 Firmware

Precision 7520 Firmware

Precision 7530 Firmware

Precision 7540 Firmware

Precision 7550 Firmware

Precision 7560 Firmware

Precision 7710 Firmware

Precision 7720 Firmware

Precision 7730 Firmware

Precision 7740 Firmware

Precision 7750 Firmware

Precision 7760 Firmware

Vostro 13 5370 Firmware

Vostro 14 3468 Firmware

Vostro 14 3478 Firmware

Vostro 14 5468 Firmware

Vostro 14 5471 Firmware

Vostro 15 3568 Firmware

Vostro 15 3572 Firmware

Vostro 15 3578 Firmware

Affected Vendors

Dell

References (2)

Vendor Advisory https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240

/ 100

high-risk

Severity 20/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 33/34 · Critical