high
7.5
CWE
20
Advisory Published
Updated

CVE-2021-36283: Input Validation

First published: Thu Sep 16 2021(Updated: )

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Credit: security_alert@emc.com

Affected SoftwareAffected VersionHow to fix
Dell chengming 3990 firmware<1.3.1
Dell chengming 3990
Dell chengming 3991 firmware<1.3.1
Dell chengming 3991
Dell g3 15 3500 firmware<1.7.1
Dell G3 3500
Dell G3 15 3590 firmware<1.12.0
Dell G3 15 3590
Dell g3 15 5500 firmware<1.7.1
Dell g3 15 5500
Dell inspiron 3493 firmware<1.12.0
Dell inspiron 3493
Dell inspiron 3501 firmware<1.1.0
Dell inspiron 3501
Dell Inspiron 3593 Firmware<1.12.0
Dell Inspiron 3593 Firmware
Dell Inspiron 3793 Firmware<1.12.0
Dell Inspiron 3793
Dell Inspiron 3880 Firmware<1.3.1
Dell Inspiron 3880 Firmware
Dell Inspiron 3881<1.3.1
Dell Inspiron 3881
Dell Inspiron 5400 2-in-1 Firmware<1.5.0
Dell Inspiron 5400 2-in-1
Dell Inspiron 5490 Firmware<1.12.0
Dell Inspiron 5490
Dell Inspiron 5493 Firmware<1.12.0
Dell Inspiron 5493 Firmware
Dell Inspiron 5498 Firmware<1.12.0
Dell Inspiron 5498
Dell Inspiron 5590 Firmware<1.12.0
Dell Inspiron 5590 Firmware
Dell Inspiron 5593<1.12.0
Dell Inspiron 5593
Dell Inspiron 5598 Firmware<1.12.0
Dell Inspiron 5598
Dell Inspiron 7391 2-in-1 Firmware<1.9.1
Dell Inspiron 7391 2-in-1
Dell Inspiron 7500 Firmware<1.5.1
Dell Inspiron 7500
Dell Inspiron 7500 2-in-1 Firmware<1.5.0
Dell Inspiron 7500 2-in-1
Dell Inspiron 7501 Firmware<1.5.1
Dell Inspiron 7501
Dell Inspiron 7590 Firmware<1.8.0
Dell Inspiron 7590 Firmware
Dell Inspiron 7591 Firmware<1.8.0
Dell Inspiron 7591 Firmware
Dell Latitude 3310 Firmware<1.8.3
Dell Latitude 3310 Firmware
Dell Latitude 3310 2-in-1 Firmware<1.17.1
Dell Latitude 3310 2-in-1 Firmware
Dell Latitude 5300 Firmware<1.12.1
Dell Latitude 5300 Firmware
Dell Latitude 5300 2-in-1 Firmware<1.12.1
Dell Latitude 5300 2-in-1
Dell Latitude 5310 Firmware<1.4.2
Dell Latitude 5310 Firmware
Dell Latitude 5310 2-in-1 Firmware=1.4.2
Dell Latitude 5310 2-in-1
Dell Latitude 5400 Firmware<1.10.1
Dell Latitude 5400 Firmware
Dell Latitude 5401 Firmware<1.11.1
Dell Latitude 5401 Firmware
Dell Latitude 5410 Firmware<1.4.3
Dell Latitude 5410
Dell Latitude 5411 Firmware<1.4.3
Dell Latitude 5411 Firmware
Dell Latitude 5500 Firmware<1.10.1
Dell Latitude 5500
Dell Latitude 5511 Firmware<1.4.3
Dell Latitude 5511 Firmware
Dell Latitude 7200 2-in-1 Firmware<1.10.1
Dell Latitude 7200
Dell Latitude 7210 2-in-1 firmware<1.5.1
Dell Latitude 7210 2-in-1 firmware
Dell Latitude 7220 Rugged Extreme Firmware<1.9.1
Dell Latitude 7220EX Rugged Extreme Tablet
Dell Latitude 7300 Firmware<1.11.1
Dell Latitude 7300 Firmware
Dell Latitude 7310 Firmware<1.5.1
Dell Latitude 7310 Firmware
Dell Latitude 7400 Firmware<1.11.1
Dell Latitude 7400
Dell Latitude 7400 2-in-1 firmware<1.10.0
Dell Latitude 7400 2-in-1 firmware
Dell Latitude 7410 Firmware<1.5.1
Dell Latitude 7410
Dell Latitude 9410 Firmware<1.5.1
Dell Latitude 9410 Firmware
Dell Latitude 9510 Firmware<1.4.2
Dell Latitude 9510 Firmware
Dell OptiPlex 3080 Firmware<1.3.1
Dell OptiPlex 3080
Dell OptiPlex 3280 AIO Firmware<1.3.1
Dell OptiPlex 3280 AIO
Dell OptiPlex 5080 Firmware<1.3.1
Dell OptiPlex 5080 Firmware
Dell Optiplex 5480 AIO Firmware<1.4.0
Dell OptiPlex 5480 AIO
Dell OptiPlex 7080 Firmware<1.3.10
Dell OptiPlex 7080 Firmware
Dell OptiPlex 7480 All-in-One Firmware<1.6.2
Dell OptiPlex 7480 AIO
Dell OptiPlex 7780 Firmware<1.6.2
Dell OptiPlex 7780 AIO
Dell Precision 3440 Firmware<1.3.10
Dell Precision 3440
Dell Precision 3540 Firmware<1.10.1
Dell Precision 3540
Dell Precision 3541 Firmware<1.11.1
Dell Precision 3541
Dell Precision 3550 Firmware<1.4.3
Dell Precision 3550
Dell Precision 3551 Firmware<1.4.3
Dell Precision 3551 Firmware
Dell Precision 3640 Firmware<1.4.3
Dell Precision 3640 Tower
Dell Precision 5540 Firmware<1.9.1
Dell Precision 5540 Firmware
Dell Precision 5550 Firmware<1.6.1
Dell Precision 5550 Firmware
Dell Precision 5750 Firmware<1.6.3
Dell Precision 5750 Firmware
Dell Precision 7540 Firmware<1.11.2
Dell Precision 7540 Firmware
Dell Precision 7550 Firmware<1.6.2
Dell Precision 7550 Firmware
Dell Precision 7740 Firmware<1.11.2
Dell Precision 7740 Firmware
Dell Precision 7750 Firmware<1.6.2
Dell Precision 7750
Dell Vostro 3401 Firmware<1.1.0
Dell Vostro 3401 Firmware
Dell Vostro 3491 Firmware<1.12.0
Dell Vostro 3491
Dell Vostro 3501 Firmware<1.1.0
Dell Vostro 3501 Firmware
Dell Vostro 3591 Firmware<1.12.0
Dell Vostro 3591
Dell Vostro 3681 Firmware<1.3.1
Dell Vostro 3681
Dell Vostro 3881 Firmware<1.3.1
Dell Vostro 3881
Dell Vostro 3888 Firmware<1.3.1
Dell Vostro 3888
Dell Vostro 5490 Firmware<1.12.0
Dell Vostro 5490
Dell Vostro 5590 Firmware<1.12.0
Dell Vostro 5590 Firmware
Dell Vostro 7500 Firmware<1.5.1
Dell Vostro 7500
Dell Vostro 7590 Firmware<1.8.0
Dell Vostro 7590
Dell Wyse 5470 Firmware<1.6.0
Dell Wyse 5470 Thin Client
Dell XPS 13 9300 Firmware<1.4.1
Dell XPS 13 9300 Firmware
Dell XPS 13 9380 Firmware<1.12.0
Dell XPS 13 9380 Firmware
Dell XPS 17 9700 Firmware<1.6.3
Dell XPS 17 9700
Dell XPS 7380 Firmware<1.7.0
Dell XPS 7380 Firmware
Dell XPS 15 7590 Firmware<1.9.1
Dell XPS 7590 Firmware
Dell XPS 7390 2-in-1 Firmware<1.7.1
Dell XPS 7390 2-in-1 Firmware
Dell XPS 15 9500 Firmware<1.6.1
Dell XPS 15 9500

Remedy

https://www.dell.com/support/kbdoc/000191495/

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2021-36283?

    The severity of CVE-2021-36283 is considered to be high due to its potential for arbitrary code execution.

  • How do I fix CVE-2021-36283?

    To fix CVE-2021-36283, ensure that you update the affected Dell BIOS firmware to a patched version beyond 1.3.1.

  • What systems are affected by CVE-2021-36283?

    CVE-2021-36283 affects several Dell devices, including models in the Inspiron, Latitude, Vostro, G3, and Precision series.

  • What is the nature of CVE-2021-36283?

    CVE-2021-36283 is an improper input validation vulnerability that could allow a local authenticated attacker to execute arbitrary code.

  • Who can exploit CVE-2021-36283?

    CVE-2021-36283 can potentially be exploited by local authenticated malicious users.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203