CVSS: 8.2EPSS: 0%CPEs: 61EXPL: 0CVE-2021-21522
https://notcve.org/view.php?id=CVE-2021-21522
28 Sep 2021 — Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface. Dell BIOS contiene un problema de Administración de Credenciales. Un usuario malicioso autenticado localmente puede explotar potencialmente esta vulnerabilidad para conseguir acceso a información confidencial en un almacenamiento NVMe al restab... • https://www.dell.com/support/kbdoc/000191495 • CWE-255: Credentials Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 256EXPL: 0CVE-2021-21574
https://notcve.org/view.php?id=CVE-2021-21574
24 Jun 2021 — Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions. La funcionalidad Dell BIOSConnect contiene una vulnerabilidad de desbordamiento de búfer. Un usuario administrador malicioso y autenticado con acceso local al sistema puede explotar esta vulnerabilidad para ejecutar código arbitrario y omitir las restricciones de UEFI • https://www.dell.com/support/kbdoc/en-us/000188682 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 256EXPL: 0CVE-2021-21573
https://notcve.org/view.php?id=CVE-2021-21573
24 Jun 2021 — Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions. La funcionalidad Dell BIOSConnect contiene una vulnerabilidad de desbordamiento del búfer. Un usuario administrador malicioso autenticado con acceso local al sistema puede explotar esta vulnerabilidad para ejecutar código arbitrario y omitir las restricciones de la UEFI • https://www.dell.com/support/kbdoc/en-us/000188682 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 256EXPL: 0CVE-2021-21572
https://notcve.org/view.php?id=CVE-2021-21572
24 Jun 2021 — Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions. La funcionalidad Dell BIOSConnect contiene una vulnerabilidad de desbordamiento del búfer. Un usuario administrador malicioso autenticado con acceso local al sistema puede explotar potencialmente esta vulnerabilidad para ejecutar código arbitrario y omitir las restricciones de la... • https://www.dell.com/support/kbdoc/en-us/000188682 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 256EXPL: 0CVE-2021-21571
https://notcve.org/view.php?id=CVE-2021-21571
24 Jun 2021 — Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering. La pila https de la UEFI de Dell aprovechada por la funcionalidad Dell BIOSConnect y la funcionalidad Dell HTTPS Boot contiene una vulnerabilidad de combrobación de certificados inapropiada. Un ... • https://www.dell.com/support/kbdoc/en-us/000188682 • CWE-295: Improper Certificate Validation •
CVSS: 7.1EPSS: 0%CPEs: 708EXPL: 0CVE-2020-5362
https://notcve.org/view.php?id=CVE-2020-5362
10 Jun 2020 — Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values. Plataformas Dell Client Consumer and Commercial, incluyen una vulnerabilidad de autorización inapropiada en la interfaz de Administración de Dell para la cual un actor no autorizado, c... • https://www.dell.com/support/article/SLN321726 • CWE-285: Improper Authorization CWE-862: Missing Authorization •
CVSS: 6.1EPSS: 0%CPEs: 348EXPL: 0CVE-2020-5326
https://notcve.org/view.php?id=CVE-2020-5326
21 Feb 2020 — Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager. Las plataformas afectadas de Dell Client contienen una vulnerabilidad de omisión de autenticaci... • https://www.dell.com/support/article/SLN320337 • CWE-306: Missing Authentication for Critical Function •
CVSS: 7.2EPSS: 0%CPEs: 482EXPL: 0CVE-2019-3717
https://notcve.org/view.php?id=CVE-2019-3717
05 Aug 2019 — Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability. Las plataforma... • https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en •