CVE-2021-36284: Medium severity dell latitude 5310 2-in-1 firmware vulnerability
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-36284?
CVE-2021-36284 is a vulnerability in Dell BIOS that allows a local authenticated malicious administrator to bypass excessive admin password attempt mitigations and perform a brute force attack.
Which Dell products are affected by CVE-2021-36284?
Dell Latitude 5310 2-in-1 Firmware up to version 1.7.0, Dell Latitude 5320 Firmware up to version 1.7.0, Dell Latitude 5400 Firmware up to version 1.7.1, Dell Latitude 5411 Firmware up to version 1.6.0, Dell Latitude 5500 Firmware up to version 1.8.0, Dell Latitude 5520 Firmware up to version 1.6.0, Dell Latitude 5511 Firmware up to version 1.7.1, Dell Latitude 7212 Rugged Extreme Tablet Firmware up to version 1.7.0, Dell Latitude 7280 Firmware up to version 1.9.1, Dell Latitude 7320 Firmware up to version 1.7.0, Dell Latitude 7370 Firmware up to version 1.7.1, Dell Latitude 7420 Firmware up to version 1.7.0, Dell Latitude 7480 Firmware up to version 1.7.1, Dell Latitude 9410 Firmware up to version 1.7.1, Dell Latitude 9510 Firmware up to version 1.7.0, Dell Latitude 9520 Firmware up to version 1.6.0, Dell Optiplex 3080 Firmware up to version 1.5.2, Dell Optiplex 3280 Aio Firmware up to version 1.2.0, Dell Optiplex 7480 Aio Firmware up to version 1.2.0, Dell Precision 3551 Ffirmware up to version 1.6.2, Dell Precision 3640 Tower Firmware up to version 1.7.1 are affected.
What is the severity of CVE-2021-36284?
CVE-2021-36284 has a severity value of 4.4, which is considered medium.
How can I fix CVE-2021-36284?
To fix CVE-2021-36284, Dell recommends updating the affected products to the latest firmware version available.
Where can I find more information about CVE-2021-36284?
You can find more information about CVE-2021-36284 on Dell's official support website: https://www.dell.com/support/kbdoc/000191495