CVE-2021-36285
—CVSS 3.1
4.4 medium
EPSS
<1%p14
Published
()
Modified
Description
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack.
- Vendors
- dell
- Products
- latitude 5310 2-in-1 firmware, latitude 5320 firmware, latitude 5400 firmware, latitude 5411 firmware, latitude 5500 firmware, latitude 5520 firmware, latitude 5511 firmware, latitude 7212 rugged extreme tablet firmware, latitude 7280 firmware, latitude 7320 firmware, latitude 7370 firmware, latitude 7420 firmware
- Weakness
- CWE-307
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.