CVSS: 7.5EPSS: 0%CPEs: 256EXPL: 0CVE-2021-21572
https://notcve.org/view.php?id=CVE-2021-21572
24 Jun 2021 — Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions. La funcionalidad Dell BIOSConnect contiene una vulnerabilidad de desbordamiento del búfer. Un usuario administrador malicioso autenticado con acceso local al sistema puede explotar potencialmente esta vulnerabilidad para ejecutar código arbitrario y omitir las restricciones de la... • https://www.dell.com/support/kbdoc/en-us/000188682 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 256EXPL: 0CVE-2021-21571
https://notcve.org/view.php?id=CVE-2021-21571
24 Jun 2021 — Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering. La pila https de la UEFI de Dell aprovechada por la funcionalidad Dell BIOSConnect y la funcionalidad Dell HTTPS Boot contiene una vulnerabilidad de combrobación de certificados inapropiada. Un ... • https://www.dell.com/support/kbdoc/en-us/000188682 • CWE-295: Improper Certificate Validation •