ZeroHour

CVE-2021-36343

CVSS 3.1
6.4 medium
EPSS
<1%p15
Published
()
Modified
Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Vendors
dell
Products
precision 5820 tower firmware, precision 7510 firmware, precision 7520 firmware, precision 7530 firmware, precision 7540 firmware, precision 7550 firmware, precision 7560 firmware, precision 7710 firmware, precision 7720 firmware, precision 7730 firmware, precision 7740 firmware, precision 7750 firmware
Weakness
CWE-119, CWE-20
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.