Dell Client BIOS Multiple Vulnerabilities (DSA-2021-106)

According to its self-reported version, Dell BIOS is affected by multiple vulnerabilities. - Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit th...

CVE-2021-21573

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions...

CVE-2021-21573

Dell BIOSConnect feature contains a buffer overflow (CVE-2021-21573) in the Dell Client BIOS. An authenticated local admin can exploit this to execute arbitrary code and bypass UEFI restrictions. Dell released patches via BIOS firmware updates (per advisory 000188682); ensure affected systems are...