Dell Client BIOS Multiple Vulnerabilities (DSA-2021-106)

According to its self-reported version, Dell BIOS is affected by multiple vulnerabilities. - Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit th...

CVE-2021-21572

CVE-2021-21572 is a Dell BIOSConnect buffer-overflow vulnerability in the Dell Client BIOS. An authenticated malicious admin with local access could exploit the flaw to execute arbitrary code and bypass UEFI restrictions. Several connected sources (CNVD, NVD, CNNSC/nasl-like advisories, and Nessu...