ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-36342

—
CVSS 3.1
6.4 medium
EPSS
<1%p16
Published
()
Modified
Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Vendors
dell
Products
precision 7510 firmware, precision 7520 firmware, precision 7530 firmware, precision 7540 firmware, precision 7550 firmware, precision 7560 firmware, precision 7710 firmware, precision 7720 firmware, precision 7730 firmware, precision 7740 firmware, precision 7750 firmware, precision 7760 firmware
Weakness
CWE-119, CWE-20
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.