CVE-2021-21522
Severity Score
4.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.
Dell BIOS contiene un problema de Administración de Credenciales. Un usuario malicioso autenticado localmente puede explotar potencialmente esta vulnerabilidad para conseguir acceso a información confidencial en un almacenamiento NVMe al restablecer la contraseña del BIOS en el sistema por medio de la interfaz de administración
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-04 CVE Reserved
- 2021-09-28 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-255: Credentials Management Errors
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.dell.com/support/kbdoc/000191495 | 2023-06-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dell Search vendor "Dell" | Latitude 5285 2-in-1 Firmware Search vendor "Dell" for product "Latitude 5285 2-in-1 Firmware" | < 1.13.0 Search vendor "Dell" for product "Latitude 5285 2-in-1 Firmware" and version " < 1.13.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 5285 2-in-1 Search vendor "Dell" for product "Latitude 5285 2-in-1" | * | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 5289 2-in-1 Firmware Search vendor "Dell" for product "Latitude 5289 2-in-1 Firmware" | < 1.23.1 Search vendor "Dell" for product "Latitude 5289 2-in-1 Firmware" and version " < 1.23.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 5289 2-in-1 Search vendor "Dell" for product "Latitude 5289 2-in-1" | * | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 5310 2-in-1 Firmware Search vendor "Dell" for product "Latitude 5310 2-in-1 Firmware" | 1.7.0 Search vendor "Dell" for product "Latitude 5310 2-in-1 Firmware" and version "1.7.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 5310 2-in-1 Search vendor "Dell" for product "Latitude 5310 2-in-1" | * | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 5290 2-in-1 Firmware Search vendor "Dell" for product "Latitude 5290 2-in-1 Firmware" | < 1.16.0 Search vendor "Dell" for product "Latitude 5290 2-in-1 Firmware" and version " < 1.16.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 5290 2-in-1 Search vendor "Dell" for product "Latitude 5290 2-in-1" | * | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7210 2-in-1 Firmware Search vendor "Dell" for product "Latitude 7210 2-in-1 Firmware" | < 1.7.0 Search vendor "Dell" for product "Latitude 7210 2-in-1 Firmware" and version " < 1.7.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7210 2-in-1 Search vendor "Dell" for product "Latitude 7210 2-in-1" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7212 Rugged Extreme Tablet Firmware Search vendor "Dell" for product "Latitude 7212 Rugged Extreme Tablet Firmware" | < 1.33.0 Search vendor "Dell" for product "Latitude 7212 Rugged Extreme Tablet Firmware" and version " < 1.33.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7212 Rugged Extreme Tablet Search vendor "Dell" for product "Latitude 7212 Rugged Extreme Tablet" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7212 Rugged Extreme Tablet Firmware Search vendor "Dell" for product "Latitude 7212 Rugged Extreme Tablet Firmware" | 1.33.0 Search vendor "Dell" for product "Latitude 7212 Rugged Extreme Tablet Firmware" and version "1.33.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7212 Rugged Extreme Tablet Search vendor "Dell" for product "Latitude 7212 Rugged Extreme Tablet" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7280 Firmware Search vendor "Dell" for product "Latitude 7280 Firmware" | < 1.21.1 Search vendor "Dell" for product "Latitude 7280 Firmware" and version " < 1.21.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7280 Search vendor "Dell" for product "Latitude 7280" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7280 Firmware Search vendor "Dell" for product "Latitude 7280 Firmware" | 1.21.1 Search vendor "Dell" for product "Latitude 7280 Firmware" and version "1.21.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7280 Search vendor "Dell" for product "Latitude 7280" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7290 Firmware Search vendor "Dell" for product "Latitude 7290 Firmware" | < 1.20.0 Search vendor "Dell" for product "Latitude 7290 Firmware" and version " < 1.20.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7290 Search vendor "Dell" for product "Latitude 7290" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7290 Firmware Search vendor "Dell" for product "Latitude 7290 Firmware" | 1.20.0 Search vendor "Dell" for product "Latitude 7290 Firmware" and version "1.20.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7290 Search vendor "Dell" for product "Latitude 7290" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7285 Firmware Search vendor "Dell" for product "Latitude 7285 Firmware" | < 1.11.0 Search vendor "Dell" for product "Latitude 7285 Firmware" and version " < 1.11.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7285 Search vendor "Dell" for product "Latitude 7285" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7285 Firmware Search vendor "Dell" for product "Latitude 7285 Firmware" | 1.11.0 Search vendor "Dell" for product "Latitude 7285 Firmware" and version "1.11.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7285 Search vendor "Dell" for product "Latitude 7285" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7370 Firmware Search vendor "Dell" for product "Latitude 7370 Firmware" | < 1.24.3 Search vendor "Dell" for product "Latitude 7370 Firmware" and version " < 1.24.3" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7370 Search vendor "Dell" for product "Latitude 7370" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7370 Firmware Search vendor "Dell" for product "Latitude 7370 Firmware" | 1.24.3 Search vendor "Dell" for product "Latitude 7370 Firmware" and version "1.24.3" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7370 Search vendor "Dell" for product "Latitude 7370" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7310 Firmware Search vendor "Dell" for product "Latitude 7310 Firmware" | < 1.7.0 Search vendor "Dell" for product "Latitude 7310 Firmware" and version " < 1.7.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7310 Search vendor "Dell" for product "Latitude 7310" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7380 Firmware Search vendor "Dell" for product "Latitude 7380 Firmware" | 1.21.1 Search vendor "Dell" for product "Latitude 7380 Firmware" and version "1.21.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7380 Search vendor "Dell" for product "Latitude 7380" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7389 Firmware Search vendor "Dell" for product "Latitude 7389 Firmware" | < 1.23.1 Search vendor "Dell" for product "Latitude 7389 Firmware" and version " < 1.23.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7389 Search vendor "Dell" for product "Latitude 7389" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7390 Firmware Search vendor "Dell" for product "Latitude 7390 Firmware" | 1.20.0 Search vendor "Dell" for product "Latitude 7390 Firmware" and version "1.20.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7390 Search vendor "Dell" for product "Latitude 7390" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7410 Firmware Search vendor "Dell" for product "Latitude 7410 Firmware" | < 1.7.0 Search vendor "Dell" for product "Latitude 7410 Firmware" and version " < 1.7.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7410 Search vendor "Dell" for product "Latitude 7410" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7390 2-in-1 Firmware Search vendor "Dell" for product "Latitude 7390 2-in-1 Firmware" | < 1.19.0 Search vendor "Dell" for product "Latitude 7390 2-in-1 Firmware" and version " < 1.19.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7390 2-in-1 Search vendor "Dell" for product "Latitude 7390 2-in-1" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7420 Firmware Search vendor "Dell" for product "Latitude 7420 Firmware" | < 1.7.1 Search vendor "Dell" for product "Latitude 7420 Firmware" and version " < 1.7.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7420 Search vendor "Dell" for product "Latitude 7420" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7480 Firmware Search vendor "Dell" for product "Latitude 7480 Firmware" | < 1.21.1 Search vendor "Dell" for product "Latitude 7480 Firmware" and version " < 1.21.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7480 Search vendor "Dell" for product "Latitude 7480" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 7490 Firmware Search vendor "Dell" for product "Latitude 7490 Firmware" | < 1.20.1 Search vendor "Dell" for product "Latitude 7490 Firmware" and version " < 1.20.1" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 7490 Search vendor "Dell" for product "Latitude 7490" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 9410 Firmware Search vendor "Dell" for product "Latitude 9410 Firmware" | < 1.7.0 Search vendor "Dell" for product "Latitude 9410 Firmware" and version " < 1.7.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 9410 Search vendor "Dell" for product "Latitude 9410" | - | - |
Safe
|
| Dell Search vendor "Dell" | Latitude 9510 Firmware Search vendor "Dell" for product "Latitude 9510 Firmware" | < 1.6.0 Search vendor "Dell" for product "Latitude 9510 Firmware" and version " < 1.6.0" | - |
Affected
| in | Dell Search vendor "Dell" | Latitude 9510 Search vendor "Dell" for product "Latitude 9510" | - | - |
Safe
|
| Dell Search vendor "Dell" | Precision 3640 Tower Firmware Search vendor "Dell" for product "Precision 3640 Tower Firmware" | < 1.6.2 Search vendor "Dell" for product "Precision 3640 Tower Firmware" and version " < 1.6.2" | - |
Affected
| in | Dell Search vendor "Dell" | Precision 3640 Tower Search vendor "Dell" for product "Precision 3640 Tower" | - | - |
Safe
|
| Dell Search vendor "Dell" | Precision 5520 Firmware Search vendor "Dell" for product "Precision 5520 Firmware" | < 1.23.1 Search vendor "Dell" for product "Precision 5520 Firmware" and version " < 1.23.1" | - |
Affected
| in | Dell Search vendor "Dell" | Precision 5520 Search vendor "Dell" for product "Precision 5520" | - | - |
Safe
|
| Dell Search vendor "Dell" | Precision 5510 Firmware Search vendor "Dell" for product "Precision 5510 Firmware" | < 1.17.0 Search vendor "Dell" for product "Precision 5510 Firmware" and version " < 1.17.0" | - |
Affected
| in | Dell Search vendor "Dell" | Precision 5510 Search vendor "Dell" for product "Precision 5510" | - | - |
Safe
|
| Dell Search vendor "Dell" | Precision 5530 2-in-1 Firmware Search vendor "Dell" for product "Precision 5530 2-in-1 Firmware" | < 1.14.10 Search vendor "Dell" for product "Precision 5530 2-in-1 Firmware" and version " < 1.14.10" | - |
Affected
| in | Dell Search vendor "Dell" | Precision 5530 2-in-1 Search vendor "Dell" for product "Precision 5530 2-in-1" | - | - |
Safe
|
| Dell Search vendor "Dell" | Xps 13 9360 Firmware Search vendor "Dell" for product "Xps 13 9360 Firmware" | < 2.16.0 Search vendor "Dell" for product "Xps 13 9360 Firmware" and version " < 2.16.0" | - |
Affected
| in | Dell Search vendor "Dell" | Xps 13 9360 Search vendor "Dell" for product "Xps 13 9360" | - | - |
Safe
|
| Dell Search vendor "Dell" | Xps 13 9370 Firmware Search vendor "Dell" for product "Xps 13 9370 Firmware" | < 1.15.0 Search vendor "Dell" for product "Xps 13 9370 Firmware" and version " < 1.15.0" | - |
Affected
| in | Dell Search vendor "Dell" | Xps 13 9370 Search vendor "Dell" for product "Xps 13 9370" | - | - |
Safe
|
| Dell Search vendor "Dell" | Xps 15 9575 2-in-1 Firmware Search vendor "Dell" for product "Xps 15 9575 2-in-1 Firmware" | < 1.16.2 Search vendor "Dell" for product "Xps 15 9575 2-in-1 Firmware" and version " < 1.16.2" | - |
Affected
| in | Dell Search vendor "Dell" | Xps 15 9575 2-in-1 Search vendor "Dell" for product "Xps 15 9575 2-in-1" | - | - |
Safe
|