CVE-2021-21522

🗓️ 28 Sep 2021 19:20:18Reported by dellType

Dell BIOS has Credentials Management issue allowing local authenticated user to reset BIOS password and gain access to sensitive info on NVMe storage

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-21522	29 Sep 202100:36	–	circl
CNNVD	Dell BIOS 信任管理问题漏洞	21 Sep 202100:00	–	cnnvd
CNVD	Dell BIOS Trust Management Issue Vulnerability	29 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-21522	28 Sep 202119:20	–	cvelist
EUVD	EUVD-2021-8794	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Dell BIOS	17 Sep 202100:00	–	ncsc
NVD	CVE-2021-21522	28 Sep 202120:15	–	nvd
Prion	Design/Logic Flaw	28 Sep 202120:15	–	prion
Positive Technologies	PT-2021-14574 · Dell · Dell Bios	28 Sep 202100:00	–	ptsecurity

NVD

Vulners

Node

dell latitude_5285_2-in-1_firmwareRange<1.13.0

AND

dell latitude_5285_2-in-1

Node

dell latitude_5289_2-in-1_firmwareRange<1.23.1

AND

dell latitude_5289_2-in-1

Node

dell latitude_5310_2-in-1_firmwareMatch1.7.0

AND

dell latitude_5310_2-in-1

Node

dell latitude_5290_2-in-1_firmwareRange<1.16.0

AND

dell latitude_5290_2-in-1

Node

dell latitude_7210_2-in-1_firmwareRange<1.7.0

AND

dell latitude_7210_2-in-1Match-

Node

dell latitude_7212_rugged_extreme_tablet_firmwareRange<1.33.0

dell latitude_7212_rugged_extreme_tablet_firmwareMatch1.33.0

AND

dell latitude_7212_rugged_extreme_tabletMatch-

Node

dell latitude_7280_firmwareRange<1.21.1

dell latitude_7280_firmwareMatch1.21.1

AND

dell latitude_7280Match-

Node

dell latitude_7290_firmwareRange<1.20.0

dell latitude_7290_firmwareMatch1.20.0

AND

dell latitude_7290Match-

Node

dell latitude_7285_firmwareRange<1.11.0

dell latitude_7285_firmwareMatch1.11.0

AND

dell latitude_7285Match-

Node

dell latitude_7370_firmwareRange<1.24.3

dell latitude_7370_firmwareMatch1.24.3

AND

dell latitude_7370Match-

Node

dell latitude_7310_firmwareRange<1.7.0

AND

dell latitude_7310Match-

Node

dell latitude_7380_firmwareMatch1.21.1

AND

dell latitude_7380Match-

Node

dell latitude_7389_firmwareRange<1.23.1

AND

dell latitude_7389Match-

Node

dell latitude_7390_firmwareMatch1.20.0

AND

dell latitude_7390Match-

Node

dell latitude_7410_firmwareRange<1.7.0

AND

dell latitude_7410Match-

Node

dell latitude_7390_2-in-1_firmwareRange<1.19.0

AND

dell latitude_7390_2-in-1Match-

Node

dell latitude_7420_firmwareRange<1.7.1

AND

dell latitude_7420Match-

Node

dell latitude_7480_firmwareRange<1.21.1

AND

dell latitude_7480Match-

Node

dell latitude_7490_firmwareRange<1.20.1

AND

dell latitude_7490Match-

Node

dell latitude_9410_firmwareRange<1.7.0

AND

dell latitude_9410Match-

Node

dell latitude_9510_firmwareRange<1.6.0

AND

dell latitude_9510Match-

Node

dell precision_3640_tower_firmwareRange<1.6.2

AND

dell precision_3640_towerMatch-

Node

dell precision_5520_firmwareRange<1.23.1

AND

dell precision_5520Match-

Node

dell precision_5510_firmwareRange<1.17.0

AND

dell precision_5510Match-

Node

dell precision_5530_2-in-1_firmwareRange<1.14.10

AND

dell precision_5530_2-in-1Match-

Node

dell xps_13_9360_firmwareRange<2.16.0

AND

dell xps_13_9360Match-

Node

dell xps_13_9370_firmwareRange<1.15.0

AND

dell xps_13_9370Match-

Node

dell xps_15_9575_2-in-1_firmwareRange<1.16.2

AND

dell xps_15_9575_2-in-1Match-

[
  {
    "product": "CPG BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.13.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/000191495

21 Nov 2024 05:48Current

4.6Medium risk

Vulners AI Score4.6

CVSS 22.1

CVSS 3.14.4 - 8.2

EPSS0.00043

CWE-255