CVE-2024-52541

CVE-2024-52541 affects Dell Client Platform BIOS. The vulnerability is a weak authentication flaw that could allow a high-privilege attacker with local access to achieve Elevation of Privileges. The connected sources confirm the issue but do not provide public exploit details or concrete remediat...

CVE-2021-36343

CVE-2021-36343 affects Dell BIOS and is caused by improper input validation in the BIOS, enabling a locally authenticated attacker to use a System Management Interrupt (SMI) to gain arbitrary code execution in SMRAM. Public sources describe the vulnerability as a locally exploitable issue that ca...

CVE-2022-22566

CVE-2022-22566 affects Dell Client Commercial and Consumer platforms, involving a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access could potentially exploit the flaw to execute arbitrary code on the device. CVSSv3.1 base score is 7.2 (HIGH); attack...

CVE-2023-48674

CVE-2023-48674 affects Dell Platform BIOS. Described as an improper NULL termination vulnerability that could allow a high-privilege user with network access to send malicious data to the device, potentially causing some services to cease functioning (DoS). Documented impact includes availability...

CVE-2022-22567

CVE-2022-22567 affects Dell Client Commercial (and Consumer) platforms and is caused by insufficient verification of data authenticity, enabling an authenticated attacker to install modified BIOS firmware. The connected records confirm the vulnerability targets Dell client platforms and involve B...

CVE-2021-21571

CVE-2021-21571 concerns the Dell BIOSConnect/HTTPS Boot stack in Dell UEFI BIOS. The vulnerability is due to improper certificate validation in the BIOSConnect HTTPS path, enabling a MITM attacker to remotely deliver content and potentially cause denial of service and payload tampering. Affected ...

CVE-2021-21574

Dell BIOSConnect vulnerability (CVE-2021-21574) is a buffer overflow in the Dell BIOSConnect feature of Dell Client BIOS. Exploitation requires an authenticated, local admin user and can lead to arbitrary code execution with UEFI/BIOS privileges, potentially bypassing UEFI restrictions. Public de...

CVE-2021-36325

CVE-2021-36325 affects Dell BIOS embedded firmware. A Dell BIOS input-validation error allows a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Reported impact includes high confidentiality, integrity, and availability concerns; exploitation details are not provided...

CVE-2021-21573

Dell BIOSConnect feature contains a buffer overflow (CVE-2021-21573) in the Dell Client BIOS. An authenticated local admin can exploit this to execute arbitrary code and bypass UEFI restrictions. Dell released patches via BIOS firmware updates (per advisory 000188682); ensure affected systems are...

CVE-2021-21572

CVE-2021-21572 is a Dell BIOSConnect buffer-overflow vulnerability in the Dell Client BIOS. An authenticated malicious admin with local access could exploit the flaw to execute arbitrary code and bypass UEFI restrictions. Several connected sources (CNVD, NVD, CNNSC/nasl-like advisories, and Nessu...

CVE-2024-22448

CVE-2024-22448 concerns Dell BIOS: an Out-of-Bounds Write vulnerability in Dell BIOS, exploitable by a local, authenticated attacker with admin privileges, causing denial of service. Affected software/tooling is the Dell BIOS on Dell systems; the root cause is an out-of-bounds write in the BIOS c...

CVE-2021-36323

Dell BIOS contains an input validation vulnerability that can allow a local authenticated attacker to gain arbitrary code execution in SMRAM by abusing System Management Interrupts (SMI). Affected component is Dell BIOS (embedded firmware on a Dell motherboard memory chip). The root cause is impr...

CVE-2024-0158

CVE-2024-0158 relates to Dell BIOS, where an improper input validation flaw could let a locally authenticated administrator modify a UEFI variable, causing denial of service and privilege escalation. Affected software is the Dell BIOS (details on exact versions are not consistently specified acro...

CVE-2021-36342

CVE-2021-36342 affects Dell BIOS. A locally authenticated attacker can exploit an improper input validation via a System Management Interrupt (SMI) to achieve arbitrary code execution in SMRAM. Impact is local and persistent within the BIOS/SMRAM context; exploitation details are described as SMI...

CVE-2021-36324

CVE-2021-36324 affects Dell BIOS. The issue is an improper input validation in Dell BIOS, enabling a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Impact is described as high (confidentiality, integrity, and availability affected) with local attack vector and high...

CVE-2023-43078

Dell Dock Firmware and Dell Client Platform are affected by CVE-2023-43078 due to an Improper Link Resolution vulnerability during installation, which can lead to arbitrary folder deletion and potential Privilege Escalation or Denial of Service. Affected components include the Dell Dock Firmware ...