ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-21522

—
CVSS 3.1
4.4 medium
EPSS
<1%p14
Published
()
Modified
Description

Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.

Vendors
dell
Products
latitude 5285 2-in-1 firmware, latitude 5289 2-in-1 firmware, latitude 5310 2-in-1 firmware, latitude 5290 2-in-1 firmware, latitude 7210 2-in-1 firmware, latitude 7212 rugged extreme tablet firmware, latitude 7280 firmware, latitude 7290 firmware, latitude 7285 firmware, latitude 7370 firmware, latitude 7310 firmware, latitude 7380 firmware
Weakness
CWE-255
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.