CVE-2020-5326

Dell Client platforms are affected by a BIOS Setup authentication bypass in the pre-boot iRST Manager menu. The issue allows an attacker with physical access to change BIOS Setup configuration by selecting Optimized Defaults without entering the BIOS Admin password. Root cause and affected compon...

CVE-2020-5362

CVE-2020-5362 affects Dell Client Client Consumer and Commercial platforms, where an improper authorization in the Dell Manageability interface allows an attacker with local OS administrator privileges to bypass BIOS Administrator authentication and restore BIOS Setup to default values. The NVD e...

CVE-2021-36325

CVE-2021-36325 affects Dell BIOS embedded firmware. A Dell BIOS input-validation error allows a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Reported impact includes high confidentiality, integrity, and availability concerns; exploitation details are not provided...

CVE-2019-3717

CVE-2019-3717 affects Dell Client Commercial and Consumer platforms. The vulnerability is an improper access control that could allow an unauthenticated attacker with physical access to bypass Secure Boot and run unsigned/untrusted code on expansion cards during platform boot. Impact concerns: co...

CVE-2021-36323

Dell BIOS contains an input validation vulnerability that can allow a local authenticated attacker to gain arbitrary code execution in SMRAM by abusing System Management Interrupts (SMI). Affected component is Dell BIOS (embedded firmware on a Dell motherboard memory chip). The root cause is impr...

CVE-2021-21554

CVE-2021-21554 corresponds to a stack-based buffer overflow in Dell PowerEdge BIOS/UEFI on systems with Intel Optane DC Persistent Memory (R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and Dell Precision 7920 Rack Workstation). The root cause is a stack-based overflow in BIOS/UEFI Prebo...

CVE-2024-42425

The CVE-2024-42425 entry relates to Dell Precision Rack BIOS (14G) with Intel BIOS versions prior to 2.22.2. The vulnerability is an Access of Memory Location After End of Buffer, enabling a low-privilege local attacker to cause information disclosure by reading memory after a buffer boundary. Af...

CVE-2021-36324

CVE-2021-36324 affects Dell BIOS. The issue is an improper input validation in Dell BIOS, enabling a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Impact is described as high (confidentiality, integrity, and availability affected) with local attack vector and high...

CVE-2023-32469

Dell Precision Tower BIOS has an Improper Input Validation vulnerability. A locally authenticated user with admin privileges could exploit it to execute arbitrary code. Affected: Dell Precision Tower BIOS (Precison Tower series). Root cause: input validation weakness in BIOS component. Impact: po...