CVE-2021-36283: Input Validation
Published Sep 28, 2021
·Updated
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Affected Software
170 affected components
Dell Chengming 3990 Firmware<1.3.1
Dell Chengming 3990
Dell Chengming 3991 Firmware<1.3.1
Dell Chengming 3991
Dell G3 15 3500 Firmware<1.7.1
Dell G3 15 3500
Dell G3 15 3590 Firmware<1.12.0
Dell G3 15 3590
Dell G3 15 5500 Firmware<1.7.1
Dell G3 15 5500
Dell Inspiron 3493 Firmware<1.12.0
Dell Inspiron 3493
Dell Inspiron 3501 Firmware<1.1.0
Dell Inspiron 3501
Dell Inspiron 3593 Firmware<1.12.0
Dell Inspiron 3593
Dell Inspiron 3793 Firmware<1.12.0
Dell Inspiron 3793
Dell Inspiron 3880 Firmware<1.3.1
Dell Inspiron 3880
Dell Inspiron 3881 Firmware<1.3.1
Dell Inspiron 3881
Dell Inspiron 5400 2-in-1 Firmware<1.5.0
Dell Inspiron 5400 2-in-1
Dell Inspiron 5490 Firmware<1.12.0
Dell Inspiron 5490
Dell Inspiron 5493 Firmware<1.12.0
Dell Inspiron 5493
Dell Inspiron 5498 Firmware<1.12.0
Dell Inspiron 5498
Dell Inspiron 5590 Firmware<1.12.0
Dell Inspiron 5590
Dell Inspiron 5593 Firmware<1.12.0
Dell Inspiron 5593
Dell Inspiron 5598 Firmware<1.12.0
Dell Inspiron 5598
Dell Inspiron 7391 2-in-1 Firmware<1.9.1
Dell Inspiron 7391 2-in-1
Dell Inspiron 7500 Firmware<1.5.1
Dell Inspiron 7500
Dell Inspiron 7500 2-in-1 Silver Firmware<1.5.0
Dell Inspiron 7500 2-in-1 Silver
Dell Inspiron 7501 Firmware<1.5.1
Dell Inspiron 7501
Dell Inspiron 7590 Firmware<1.8.0
Dell Inspiron 7590
Dell Inspiron 7591 Firmware<1.8.0
Dell Inspiron 7591
Dell Latitude 3310 Firmware<1.8.3
Dell Latitude 3310
Dell Latitude 3310 2-in-1 Firmware<1.17.1
Dell Latitude 3310 2-in-1
Dell Latitude 5300 Firmware<1.12.1
Dell Latitude 5300
Dell Latitude 5300 2-in-1 Firmware<1.12.1
Dell Latitude 5300 2-in-1
Dell Latitude 5310 Firmware<1.4.2
Dell Latitude 5310
Dell Latitude 5310 2 In 1 Firmware=1.4.2
Dell Latitude 5310 2 In 1
Dell Latitude 5400 Firmware<1.10.1
Dell Latitude 5400
Dell Latitude 5401 Firmware<1.11.1
Dell Latitude 5401
Dell Latitude 5410 Firmware<1.4.3
Dell Latitude 5410
Dell Latitude 5411 Firmware<1.4.3
Dell Latitude 5411
Dell Latitude 5500 Firmware<1.10.1
Dell Latitude 5500
Dell Latitude 5511 Firmware<1.4.3
Dell Latitude 5511
Dell Latitude 7200 2 In 1 Firmware<1.10.1
Dell Latitude 7200 2 In 1
Dell Latitude 7210 2 In 1 Firmware<1.5.1
Dell Latitude 7210 2 In 1
Dell Latitude 7220ex Rugged Extreme Tablet Firmware<1.9.1
Dell Latitude 7220ex Rugged Extreme Tablet
Dell Latitude 7300 Firmware<1.11.1
Dell Latitude 7300
Dell Latitude 7310 Firmware<1.5.1
Dell Latitude 7310
Dell Latitude 7400 Firmware<1.11.1
Dell Latitude 7400
Dell Latitude 7400 2-in-1 Firmware<1.10.0
Dell Latitude 7400 2-in-1
Dell Latitude 7410 Firmware<1.5.1
Dell Latitude 7410
Dell Latitude 9410 Firmware<1.5.1
Dell Latitude 9410
Dell Latitude 9510 Firmware<1.4.2
Dell Latitude 9510
Dell Optiplex 3080 Firmware<1.3.1
Dell Optiplex 3080
Dell Optiplex 3280 Aio Firmware<1.3.1
Dell Optiplex 3280 Aio
Dell Optiplex 5080 Firmware<1.3.1
Dell Optiplex 5080
Dell Optiplex 5480 Aio Firmware<1.4.0
Dell Optiplex 5480 Aio
Dell Optiplex 7080 Firmware<1.3.10
Dell Optiplex 7080
Dell Optiplex 7480 Aio Firmware<1.6.2
Dell Optiplex 7480 Aio
Dell Optiplex 7780 Aio Firmware<1.6.2
Dell Optiplex 7780 Aio
Dell Precision 3440 Firmware<1.3.10
Dell Precision 3440
Dell Precision 3540 Firmware<1.10.1
Dell Precision 3540
Dell Precision 3541 Firmware<1.11.1
Dell Precision 3541
Dell Precision 3550 Firmware<1.4.3
Dell Precision 3550
Dell Precision 3551 Firmware<1.4.3
Dell Precision 3551
Dell Precision 3640 Tower Firmware<1.4.3
Dell Precision 3640 Tower
Dell Precision 5540 Firmware<1.9.1
Dell Precision 5540
Dell Precision 5550 Firmware<1.6.1
Dell Precision 5550
Dell Precision 5750 Firmware<1.6.3
Dell Precision 5750
Dell Precision 7540 Firmware<1.11.2
Dell Precision 7540
Dell Precision 7550 Firmware<1.6.2
Dell Precision 7550
Dell Precision 7740 Firmware<1.11.2
Dell Precision 7740
Dell Precision 7750 Firmware<1.6.2
Dell Precision 7750
Dell Vostro 3401 Firmware<1.1.0
Dell Vostro 3401
Dell Vostro 3491 Firmware<1.12.0
Dell Vostro 3491
Dell Vostro 3501 Firmware<1.1.0
Dell Vostro 3501
Dell Vostro 3591 Firmware<1.12.0
Dell Vostro 3591
Dell Vostro 3681 Firmware<1.3.1
Dell Vostro 3681
Dell Vostro 3881 Firmware<1.3.1
Dell Vostro 3881
Dell Vostro 3888 Firmware<1.3.1
Dell Vostro 3888
Dell Vostro 5490 Firmware<1.12.0
Dell Vostro 5490
Dell Vostro 5590 Firmware<1.12.0
Dell Vostro 5590
Dell Vostro 7500 Firmware<1.5.1
Dell Vostro 7500
Dell Vostro 7590 Firmware<1.8.0
Dell Vostro 7590
Dell Wyse 5470 Firmware<1.6.0
Dell Wyse 5470
Dell Xps 13 9300 Firmware<1.4.1
Dell Xps 13 9300
Dell Xps 13 9380 Firmware<1.12.0
Dell Xps 13 9380
Dell Xps 17 9700 Firmware<1.6.3
Dell Xps 17 9700
Dell Xps 7380 Firmware<1.7.0
Dell Xps 7380
Dell Xps 7590 Firmware<1.9.1
Dell Xps 7590
Dell Xps 7390 2-in-1 Firmware<1.7.1
Dell Xps 7390 2-in-1
Dell Xps 9500 Firmware<1.6.1
Dell Xps 9500
Remediation
Patch Available
Event History
Sep 28, 2021
CVE Published
via MITRE·07:20 PM
Data Sourced
via MITRE·07:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-36283?
The severity of CVE-2021-36283 is considered to be high due to its potential for arbitrary code execution.
2
How do I fix CVE-2021-36283?
To fix CVE-2021-36283, ensure that you update the affected Dell BIOS firmware to a patched version beyond 1.3.1.
3
What systems are affected by CVE-2021-36283?
CVE-2021-36283 affects several Dell devices, including models in the Inspiron, Latitude, Vostro, G3, and Precision series.
4
What is the nature of CVE-2021-36283?
CVE-2021-36283 is an improper input validation vulnerability that could allow a local authenticated attacker to execute arbitrary code.
5
Who can exploit CVE-2021-36283?
CVE-2021-36283 can potentially be exploited by local authenticated malicious users.