CVE-2021-21571: Medium severity dell alienware m15 r6 firmware vulnerability
Published Jun 24, 2021
·Updated
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.
Affected Software
256 affected components
Dell Alienware M15 R6 Firmware<1.3.3
Dell Alienware M15 R6
Dell Chengming 3990 Firmware<1.4.1
Dell Chengming 3990
Dell Chengming 3991 Firmware<1.4.1
Dell Chengming 3991
Dell G15 5510 Firmware<1.4.0
Dell G15 5510
Dell G15 5511 Firmware<1.3.3
Dell G15 5511
Dell G3 3500 Firmware<1.9.0
Dell G3 3500
Dell G5 5500 Firmware<1.9.0
Dell G5 5500
Dell G7 7500 Firmware<1.9.0
Dell G7 7500
Dell G7 7700 Firmware<1.9.0
Dell G7 7700
Dell Inspiron 14 5418 Firmware<2.1.0_a06
Dell Inspiron 14 5418
Dell Inspiron 15 5518 Firmware<2.1.0_a06
Dell Inspiron 15 5518
Dell Inspiron 15 7510 Firmware<1.0.4
Dell Inspiron 15 7510
Dell Inspiron 3501 Firmware<1.6.0
Dell Inspiron 3501
Dell Inspiron 3880 Firmware<1.4.1
Dell Inspiron 3880
Dell Inspiron 3881 Firmware<1.4.1
Dell Inspiron 3881
Dell Inspiron 3891 Firmware<1.0.11
Dell Inspiron 3891
Dell Inspiron 5300 Firmware<1.7.1
Dell Inspiron 5300
Dell Inspiron 5301 Firmware<1.8.1
Dell Inspiron 5301
Dell Inspiron 5310 Firmware<2.1.0
Dell Inspiron 5310
Dell Inspiron 5400 2-in-1 Firmware<1.7.0
Dell Inspiron 5400 2-in-1
Dell Inspiron 5400 Aio Firmware<1.4.0
Dell Inspiron 5400 Aio
Dell Inspiron 5401 Firmware<1.7.2
Dell Inspiron 5401
Dell Inspiron 5401 Aio Firmware<1.4.0
Dell Inspiron 5401 Aio
Dell Inspiron 5402 Firmware<1.5.1
Dell Inspiron 5402
Dell Inspiron 5406 2n1 Firmware<1.5.1
Dell Inspiron 5406 2n1
Dell Inspiron 5408 Firmware<1.7.2
Dell Inspiron 5408
Dell Inspiron 5409 Firmware<1.5.1
Dell Inspiron 5409
Dell Inspiron 5410 2-in-1 Firmware<2.1.0
Dell Inspiron 5410 2-in-1
Dell Inspiron 5501 Firmware<1.7.2
Dell Inspiron 5501
Dell Inspiron 5502 Firmware<1.5.1
Dell Inspiron 5502
Dell Inspiron 5508 Firmware<1.7.2
Dell Inspiron 5508
Dell Inspiron 5509 Firmware<1.5.1
Dell Inspiron 5509
Dell Inspiron 7300 Firmware<1.8.1
Dell Inspiron 7300
Dell Inspiron 7300 2-in-1 Firmware<1.3.0
Dell Inspiron 7300 2-in-1
Dell Inspiron 7306 2-in-1 Firmware<1.5.1
Dell Inspiron 7306 2-in-1
Dell Inspiron 7400 Firmware<1.8.1
Dell Inspiron 7400
Dell Inspiron 7500 Firmware<1.8.0
Dell Inspiron 7500
Dell Inspiron 7500 2-in-1 Firmware<1.3.0
Dell Inspiron 7500 2-in-1
Dell Inspiron 7501 Firmware<1.8.0
Dell Inspiron 7501
Dell Inspiron 7506 Firmware<1.5.1
Dell Inspiron 7506
Dell Inspiron 7610 Firmware<1.0.4
Dell Inspiron 7610
Dell Inspiron 7700 Aio Firmware<1.4.0
Dell Inspiron 7700 Aio
Dell Inspiron 7706 2-in-1 Firmware<1.5.1
Dell Inspiron 7706 2-in-1
Dell Latitude 3120 Firmware<1.1.0
Dell Latitude 3120
Dell Latitude 3320 Firmware<1.4.0
Dell Latitude 3320
Dell Latitude 3410 Firmware<1.9.0
Dell Latitude 3410
Dell Latitude 3420 Firmware<1.8.0
Dell Latitude 3420
Dell Latitude 3510 Firmware<1.9.0
Dell Latitude 3510
Dell Latitude 3520 Firmware<1.8.0
Dell Latitude 3520
Dell Latitude 5310 Firmware<1.7.0
Dell Latitude 5310
Dell Latitude 5310 2-in-1 Firmware<1.7.0
Dell Latitude 5310 2-in-1
Dell Latitude 5320 Firmware<1.7.1
Dell Latitude 5320
Dell Latitude 5320 2-in-1 Firmware<1.7.1
Dell Latitude 5320 2-in-1
Dell Latitude 5410 Firmware<1.6.0
Dell Latitude 5410
Dell Latitude 5411 Firmware<1.6.0
Dell Latitude 5411
Dell Latitude 5420 Firmware<1.8.0
Dell Latitude 5420
Dell Latitude 5510 Firmware<1.6.0
Dell Latitude 5510
Dell Latitude 5511 Firmware<1.6.0
Dell Latitude 5511
Dell Latitude 5520 Firmware<1.7.1
Dell Latitude 5520
Dell Latitude 5521 Firmware<1.3.0_a03
Dell Latitude 5521
Dell Latitude 7210 2-in-1 Firmware<1.7.0
Dell Latitude 7210 2-in-1
Dell Latitude 7310 Firmware<1.7.0
Dell Latitude 7310
Dell Latitude 7320 Firmware<1.7.1
Dell Latitude 7320
Dell Latitude 7320 Detachable Firmware<1.4.0_a04
Dell Latitude 7320 Detachable
Dell Latitude 7410 Firmware<1.7.0
Dell Latitude 7410
Dell Latitude 7420 Firmware<1.7.1
Dell Latitude 7420
Dell Latitude 7520 Firmware<1.7.1
Dell Latitude 7520
Dell Latitude 9410 Firmware<1.7.0
Dell Latitude 9410
Dell Latitude 9420 Firmware<1.4.1
Dell Latitude 9420
Dell Latitude 9510 Firmware<1.6.0
Dell Latitude 9510
Dell Latitude 9520 Firmware<1.5.2
Dell Latitude 9520
Dell Latitude 5421 Firmware<1.3.0_a03
Dell Latitude 5421
Dell Optiplex 3080 Firmware<2.1.1
Dell Optiplex 3080
Dell Optiplex 3090 Uff Firmware<1.2.0
Dell Optiplex 3090 Uff
Dell Optiplex 3280 All-in-one Firmware<1.7.0
Dell Optiplex 3280 All-in-one
Dell Optiplex 5080 Firmware<1.4.0
Dell Optiplex 5080
Dell Optiplex 5090 Tower Firmware<1.1.35
Dell Optiplex 5090 Tower
Dell Optiplex 5490 Aio Firmware<1.3.0
Dell Optiplex 5490 Aio
Dell Optiplex 7080 Firmware<1.4.0
Dell Optiplex 7080
Dell Optiplex 7090 Tower Firmware<1.1.35
Dell Optiplex 7090 Tower
Dell Optiplex 7090 Uff Firmware<1.2.0
Dell Optiplex 7090 Uff
Dell Optiplex 7480 All-in-one Firmware<1.7.0
Dell Optiplex 7480 All-in-one
Dell Optiplex 7490 All-in-one Firmware<1.3.0
Dell Optiplex 7490 All-in-one
Dell Optiplex 7780 All-in-one Firmware<1.7.0
Dell Optiplex 7780 All-in-one
Dell Precision 17 M5750 Firmware<1.8.2
Dell Precision 17 M5750
Dell Precision 3440 Firmware<1.4.0
Dell Precision 3440
Dell Precision 3450 Firmware<1.1.35
Dell Precision 3450
Dell Precision 3550 Firmware<1.6.0
Dell Precision 3550
Dell Precision 3551 Firmware<1.6.0
Dell Precision 3551
Dell Precision 3560 Firmware<1.7.1
Dell Precision 3560
Dell Precision 3561 Firmware<1.3.0_a03
Dell Precision 3561
Dell Precision 3640 Firmware<1.6.2
Dell Precision 3640
Dell Precision 3650 Mt Firmware<1.2.0
Dell Precision 3650 Mt
Dell Precision 5550 Firmware<1.8.1
Dell Precision 5550
Dell Precision 5560 Firmware<1.3.2
Dell Precision 5560
Dell Precision 5760 Firmware<1.1.3
Dell Precision 5760
Dell Precision 7550 Firmware<1.8.0
Dell Precision 7550
Dell Precision 7560 Firmware<1.1.2
Dell Precision 7560
Dell Precision 7750 Firmware<1.8.0
Dell Precision 7750
Dell Precision 7760 Firmware<1.1.2
Dell Precision 7760
Dell Vostro 14 5410 Firmware<2.1.0_a06
Dell Vostro 14 5410
Dell Vostro 15 5510 Firmware<2.1.0_a06
Dell Vostro 15 5510
Dell Vostro 15 7510 Firmware<1.0.4
Dell Vostro 15 7510
Dell Vostro 3400 Firmware<1.6.0
Dell Vostro 3400
Dell Vostro 3500 Firmware<1.6.0
Dell Vostro 3500
Dell Vostro 3501 Firmware<1.6.0
Dell Vostro 3501
Dell Vostro 3681 Firmware<2.4.0
Dell Vostro 3681
Dell Vostro 3690 Firmware<1.0.11
Dell Vostro 3690
Dell Vostro 3881 Firmware<2.4.0
Dell Vostro 3881
Dell Vostro 3888 Firmware<2.4.0
Dell Vostro 3888
Dell Vostro 3890 Firmware<1.0.11
Dell Vostro 3890
Dell Vostro 5300 Firmware<1.7.1
Dell Vostro 5300
Dell Vostro 5301 Firmware<1.8.1
Dell Vostro 5301
Dell Vostro 5310 Firmware<2.1.0
Dell Vostro 5310
Dell Vostro 5401 Firmware<1.7.2
Dell Vostro 5401
Dell Vostro 5402 Firmware<1.5.1
Dell Vostro 5402
Dell Vostro 5501 Firmware<1.7.2
Dell Vostro 5501
Dell Vostro 5502 Firmware<1.5.1
Dell Vostro 5502
Dell Vostro 5880 Firmware<1.4.0
Dell Vostro 5880
Dell Vostro 5890 Firmware<1.0.11
Dell Vostro 5890
Dell Vostro 7500 Firmware<1.8.0
Dell Vostro 7500
Dell Xps 13 9305 Firmware<1.0.8
Dell Xps 13 9305
Dell Xps 13 2in1 9310 Firmware<2.3.3
Dell Xps 13 2in1 9310
Dell Xps 13 9310 Firmware<3.0.0
Dell Xps 13 9310
Dell Xps 15 9500 Firmware<1.8.1
Dell Xps 15 9500
Dell Xps 15 9510 Firmware<1.3.2
Dell Xps 15 9510
Dell Xps 17 9700 Firmware<1.8.2
Dell Xps 17 9700
Dell Xps 17 9710 Firmware<1.1.3
Dell Xps 17 9710
Event History
Jun 24, 2021
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-21571?
CVE-2021-21571 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2021-21571?
The fix for CVE-2021-21571 involves updating the affected Dell firmware to the latest version that addresses the certificate validation issue.
3
What products are affected by CVE-2021-21571?
CVE-2021-21571 affects various Dell products including specific firmware versions of Alienware, Inspiron, G-series, Vostro, and Precision models.
4
What are the potential impacts of exploiting CVE-2021-21571?
Exploitation of CVE-2021-21571 could allow an unauthenticated attacker to perform a person-in-the-middle attack, potentially leading to denial-of-service conditions.
5
Can CVE-2021-21571 be exploited remotely?
Yes, CVE-2021-21571 can be exploited remotely without authentication due to improper certificate validation in the Dell UEFI BIOS stack.