Threat Investigation
Request a demo

CVE-2021-21573

High

Description

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.

SeverityHigh
CVSS7.2
Exploit probability—
ProductDell Alienware M15 R6 Firmware
PublishedJun 24, 2021
First seenJun 24, 2021
Weakness typeCWE-121CWE-121

How to fix

Update
  • dell alienware_m15_r6_firmware1.3.3 or later
  • dell chengming_3990_firmware1.4.1 or later
  • dell chengming_3991_firmware1.4.1 or later
  • dell g15_5510_firmware1.4.0 or later
  • dell g15_5511_firmware1.3.3 or later
  • dell g5_5500_firmware1.9.0 or later
  • dell g7_7500_firmware1.9.0 or later
  • dell g7_7700_firmware1.9.0 or later
  • dell inspiron_14_5418_firmware2.1.0_a06 or later
  • dell inspiron_15_5518_firmware2.1.0_a06 or later
  • dell inspiron_15_7510_firmware1.0.4 or later
  • dell inspiron_3501_firmware1.6.0 or later

Affected products

ProductAffected versionsFixed in
dell alienware_m15_r6_firmwarev < 1.3.31.3.3
dell chengming_3990_firmwarev < 1.4.11.4.1
dell chengming_3991_firmwarev < 1.4.11.4.1
dell g15_5510_firmwarev < 1.4.01.4.0
dell g15_5511_firmwarev < 1.3.31.3.3
dell g3_3500_firmwarev ≤ 1.9.0—
dell g5_5500_firmwarev < 1.9.01.9.0
dell g7_7500_firmwarev < 1.9.01.9.0
dell g7_7700_firmwarev < 1.9.01.9.0
dell inspiron_14_5418_firmwarev < 2.1.0_a062.1.0_a06
dell inspiron_15_5518_firmwarev < 2.1.0_a062.1.0_a06
dell inspiron_15_7510_firmwarev < 1.0.41.0.4
dell inspiron_3501_firmwarev < 1.6.01.6.0
dell inspiron_3880_firmwarev < 1.4.11.4.1
dell inspiron_3881_firmwarev < 1.4.11.4.1
dell inspiron_3891_firmwarev < 1.0.111.0.11
dell inspiron_5300_firmwarev < 1.7.11.7.1
dell inspiron_5301_firmwarev < 1.8.11.8.1
dell inspiron_5310_firmwarev < 2.1.02.1.0
dell inspiron_5400_2-in-1_firmwarev < 1.7.01.7.0
dell inspiron_5400_aio_firmwarev < 1.4.01.4.0
dell inspiron_5401_firmwarev < 1.7.21.7.2
dell inspiron_5401_aio_firmwarev < 1.4.01.4.0
dell inspiron_5402_firmwarev < 1.5.11.5.1
dell inspiron_5406_2n1_firmwarev < 1.5.11.5.1
dell inspiron_5408_firmwarev < 1.7.21.7.2
dell inspiron_5409_firmwarev < 1.5.11.5.1
dell inspiron_5410_2-in-1_firmwarev < 2.1.02.1.0
dell inspiron_5501_firmwarev < 1.7.21.7.2
dell inspiron_5502_firmwarev < 1.5.11.5.1
dell inspiron_5508_firmwarev < 1.7.21.7.2
dell inspiron_5509_firmwarev < 1.5.11.5.1
dell inspiron_7300_firmwarev < 1.8.11.8.1
dell inspiron_7300_2-in-1_firmwarev < 1.3.01.3.0
dell inspiron_7306_2-in-1_firmwarev < 1.5.11.5.1
dell inspiron_7400_firmwarev < 1.8.11.8.1
dell inspiron_7500_firmwarev < 1.8.01.8.0
dell inspiron_7500_2-in-1_firmwarev < 1.3.01.3.0
dell inspiron_7501_firmwarev < 1.8.01.8.0
dell inspiron_7506_firmwarev < 1.5.11.5.1
dell inspiron_7610_firmwarev < 1.0.41.0.4
dell inspiron_7700_aio_firmwarev < 1.4.01.4.0
dell inspiron_7706_2-in-1_firmwarev < 1.5.11.5.1
dell latitude_3120_firmwarev < 1.1.01.1.0
dell latitude_3320_firmwarev < 1.4.01.4.0
dell latitude_3410_firmwarev < 1.9.01.9.0
dell latitude_3420_firmwarev < 1.8.01.8.0
dell latitude_3510_firmwarev < 1.9.01.9.0
dell latitude_3520_firmwarev < 1.8.01.8.0
dell latitude_5310_firmwarev < 1.7.01.7.0
dell latitude_5310_2-in-1_firmwarev < 1.7.01.7.0
dell latitude_5320_firmwarev < 1.7.11.7.1
dell latitude_5320_2-in-1_firmwarev < 1.7.11.7.1
dell latitude_5410_firmwarev < 1.6.01.6.0
dell latitude_5411_firmwarev < 1.6.01.6.0
dell latitude_5420_firmwarev < 1.8.01.8.0
dell latitude_5510_firmwarev < 1.6.01.6.0
dell latitude_5511_firmwarev < 1.6.01.6.0
dell latitude_5520_firmwarev < 1.7.11.7.1
dell latitude_5521_firmwarev < 1.3.0_a031.3.0_a03
dell latitude_7210_2-in-1_firmwarev < 1.7.01.7.0
dell latitude_7310_firmwarev < 1.7.01.7.0
dell latitude_7320_firmwarev < 1.7.11.7.1
dell latitude_7320_detachable_firmwarev < 1.4.0_a041.4.0_a04
dell latitude_7410_firmwarev < 1.7.01.7.0
dell latitude_7420_firmwarev < 1.7.11.7.1
dell latitude_7520_firmwarev < 1.7.11.7.1
dell latitude_9410_firmwarev < 1.7.01.7.0
dell latitude_9420_firmwarev < 1.4.11.4.1
dell latitude_9510_firmwarev < 1.6.01.6.0
dell latitude_9520_firmwarev < 1.5.21.5.2
dell latitude_5421_firmwarev < 1.3.0_a031.3.0_a03
dell optiplex_3080_firmwarev < 2.1.12.1.1
dell optiplex_3090_uff_firmwarev < 1.2.01.2.0
dell optiplex_3280_all-in-one_firmwarev < 1.7.01.7.0
dell optiplex_5080_firmwarev < 1.4.01.4.0
dell optiplex_5090_tower_firmwarev < 1.1.351.1.35
dell optiplex_5490_aio_firmwarev < 1.3.01.3.0
dell optiplex_7080_firmwarev < 1.4.01.4.0
dell optiplex_7090_tower_firmwarev < 1.1.351.1.35
dell optiplex_7090_uff_firmwarev < 1.2.01.2.0
dell optiplex_7480_all-in-one_firmwarev < 1.7.01.7.0
dell optiplex_7490_all-in-one_firmwarev < 1.3.01.3.0
dell optiplex_7780_all-in-one_firmwarev < 1.7.01.7.0
dell precision_17_m5750_firmwarev < 1.8.21.8.2
dell precision_3440_firmwarev < 1.4.01.4.0
dell precision_3450_firmwarev < 1.1.351.1.35
dell precision_3550_firmwarev < 1.6.01.6.0
dell precision_3551_firmwarev < 1.6.01.6.0
dell precision_3560_firmwarev < 1.7.11.7.1
dell precision_3561_firmwarev < 1.3.0_a031.3.0_a03
dell precision_3640_firmwarev < 1.6.21.6.2
dell precision_3650_mt_firmwarev < 1.2.01.2.0
dell precision_5550_firmwarev < 1.8.11.8.1
dell precision_5560_firmwarev < 1.3.21.3.2
dell precision_5760_firmwarev < 1.1.31.1.3
dell precision_7550_firmwarev < 1.8.01.8.0
dell precision_7560_firmwarev < 1.1.21.1.2
dell precision_7750_firmwarev < 1.8.01.8.0
dell precision_7760_firmwarev < 1.1.21.1.2
dell vostro_14_5410_firmwarev < 2.1.0_a062.1.0_a06
dell vostro_15_5510_firmwarev < 2.1.0_a062.1.0_a06
dell vostro_15_7510_firmwarev < 1.0.41.0.4
dell vostro_3400_firmwarev < 1.6.01.6.0
dell vostro_3500_firmwarev < 1.6.01.6.0
dell vostro_3501_firmwarev < 1.6.01.6.0
dell vostro_3681_firmwarev < 2.4.02.4.0
dell vostro_3690_firmwarev < 1.0.111.0.11
dell vostro_3881_firmwarev < 2.4.02.4.0
dell vostro_3888_firmwarev < 2.4.02.4.0
dell vostro_3890_firmwarev < 1.0.111.0.11
dell vostro_5300_firmwarev < 1.7.11.7.1
dell vostro_5301_firmwarev < 1.8.11.8.1
dell vostro_5310_firmwarev < 2.1.02.1.0
dell vostro_5401_firmwarev < 1.7.21.7.2
dell vostro_5402_firmwarev < 1.5.11.5.1
dell vostro_5501_firmwarev < 1.7.21.7.2
dell vostro_5502_firmwarev < 1.5.11.5.1
dell vostro_5880_firmwarev < 1.4.01.4.0
dell vostro_5890_firmwarev < 1.0.111.0.11
dell vostro_7500_firmwarev < 1.8.01.8.0
dell xps_13_9305_firmwarev < 1.0.81.0.8
dell xps_13_2in1_9310_firmwarev < 2.3.32.3.3
dell xps_13_9310_firmwarev < 3.0.03.0.0
dell xps_15_9500_firmwarev < 1.8.11.8.1
dell xps_15_9510_firmwarev < 1.3.21.3.2
dell xps_17_9700_firmwarev < 1.8.21.8.2
dell xps_17_9710_firmwarev < 1.1.31.1.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.