Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-36283

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 170 products from dell, from dell, from dell and 167 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2021, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2021-09-28T20:15:07.567

Last Modified

2026-06-17T03:58:35.477

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dell chengming_3990_firmware < 1.3.1 Yes
Hardware dell chengming_3990 - No
Operating System dell chengming_3991_firmware < 1.3.1 Yes
Hardware dell chengming_3991 - No
Operating System dell g3_15_3500_firmware < 1.7.1 Yes
Hardware dell g3_15_3500 - No
Operating System dell g3_15_3590_firmware < 1.12.0 Yes
Hardware dell g3_15_3590 - No
Operating System dell g3_15_5500_firmware < 1.7.1 Yes
Hardware dell g3_15_5500 - No
Operating System dell inspiron_3493_firmware < 1.12.0 Yes
Hardware dell inspiron_3493 - No
Operating System dell inspiron_3501_firmware < 1.1.0 Yes
Hardware dell inspiron_3501 - No
Operating System dell inspiron_3593_firmware < 1.12.0 Yes
Hardware dell inspiron_3593 - No
Operating System dell inspiron_3793_firmware < 1.12.0 Yes
Hardware dell inspiron_3793 - No
Operating System dell inspiron_3880_firmware < 1.3.1 Yes
Hardware dell inspiron_3880 - No
Operating System dell inspiron_3881_firmware < 1.3.1 Yes
Hardware dell inspiron_3881 - No
Operating System dell inspiron_5400_2-in-1_firmware < 1.5.0 Yes
Hardware dell inspiron_5400_2-in-1 - No
Operating System dell inspiron_5490_firmware < 1.12.0 Yes
Hardware dell inspiron_5490 - No
Operating System dell inspiron_5493_firmware < 1.12.0 Yes
Hardware dell inspiron_5493 - No
Operating System dell inspiron_5498_firmware < 1.12.0 Yes
Hardware dell inspiron_5498 - No
Operating System dell inspiron_5590_firmware < 1.12.0 Yes
Hardware dell inspiron_5590 - No
Operating System dell inspiron_5593_firmware < 1.12.0 Yes
Hardware dell inspiron_5593 - No
Operating System dell inspiron_5598_firmware < 1.12.0 Yes
Hardware dell inspiron_5598 - No
Operating System dell inspiron_7391_2-in-1_firmware < 1.9.1 Yes
Hardware dell inspiron_7391_2-in-1 - No
Operating System dell inspiron_7500_firmware < 1.5.1 Yes
Hardware dell inspiron_7500 - No
Operating System dell inspiron_7500_2-in-1_silver_firmware < 1.5.0 Yes
Hardware dell inspiron_7500_2-in-1_silver - No
Operating System dell inspiron_7501_firmware < 1.5.1 Yes
Hardware dell inspiron_7501 - No
Operating System dell inspiron_7590_firmware < 1.8.0 Yes
Hardware dell inspiron_7590 - No
Operating System dell inspiron_7591_firmware < 1.8.0 Yes
Hardware dell inspiron_7591 - No
Operating System dell latitude_3310_firmware < 1.8.3 Yes
Hardware dell latitude_3310 - No
Operating System dell latitude_3310_2-in-1_firmware < 1.17.1 Yes
Hardware dell latitude_3310_2-in-1 - No
Operating System dell latitude_5300_firmware < 1.12.1 Yes
Hardware dell latitude_5300 - No
Operating System dell latitude_5300_2-in-1_firmware < 1.12.1 Yes
Hardware dell latitude_5300_2-in-1 - No
Operating System dell latitude_5310_firmware < 1.4.2 Yes
Hardware dell latitude_5310 - No
Operating System dell latitude_5310_2_in_1_firmware 1.4.2 Yes
Hardware dell latitude_5310_2_in_1 - No
Operating System dell latitude_5400_firmware < 1.10.1 Yes
Hardware dell latitude_5400 - No
Operating System dell latitude_5401_firmware < 1.11.1 Yes
Hardware dell latitude_5401 - No
Operating System dell latitude_5410_firmware < 1.4.3 Yes
Hardware dell latitude_5410 - No
Operating System dell latitude_5411_firmware < 1.4.3 Yes
Hardware dell latitude_5411 - No
Operating System dell latitude_5500_firmware < 1.10.1 Yes
Hardware dell latitude_5500 - No
Operating System dell latitude_5511_firmware < 1.4.3 Yes
Hardware dell latitude_5511 - No
Operating System dell latitude_7200_2_in_1_firmware < 1.10.1 Yes
Hardware dell latitude_7200_2_in_1 - No
Operating System dell latitude_7210_2_in_1_firmware < 1.5.1 Yes
Hardware dell latitude_7210_2_in_1 - No
Operating System dell latitude_7220ex_rugged_extreme_tablet_firmware < 1.9.1 Yes
Hardware dell latitude_7220ex_rugged_extreme_tablet - No
Operating System dell latitude_7300_firmware < 1.11.1 Yes
Hardware dell latitude_7300 - No
Operating System dell latitude_7310_firmware < 1.5.1 Yes
Hardware dell latitude_7310 - No
Operating System dell latitude_7400_firmware < 1.11.1 Yes
Hardware dell latitude_7400 - No
Operating System dell latitude_7400_2-in-1_firmware < 1.10.0 Yes
Hardware dell latitude_7400_2-in-1 - No
Operating System dell latitude_7410_firmware < 1.5.1 Yes
Hardware dell latitude_7410 - No
Operating System dell latitude_9410_firmware < 1.5.1 Yes
Hardware dell latitude_9410 - No
Operating System dell latitude_9510_firmware < 1.4.2 Yes
Hardware dell latitude_9510 - No
Operating System dell optiplex_3080_firmware < 1.3.1 Yes
Hardware dell optiplex_3080 - No
Operating System dell optiplex_3280_aio_firmware < 1.3.1 Yes
Hardware dell optiplex_3280_aio - No
Operating System dell optiplex_5080_firmware < 1.3.1 Yes
Hardware dell optiplex_5080 - No
Operating System dell optiplex_5480_aio_firmware < 1.4.0 Yes
Hardware dell optiplex_5480_aio - No
Operating System dell optiplex_7080_firmware < 1.3.10 Yes
Hardware dell optiplex_7080 - No
Operating System dell optiplex_7480_aio_firmware < 1.6.2 Yes
Hardware dell optiplex_7480_aio - No
Operating System dell optiplex_7780_aio_firmware < 1.6.2 Yes
Hardware dell optiplex_7780_aio - No
Operating System dell precision_3440_firmware < 1.3.10 Yes
Hardware dell precision_3440 - No
Operating System dell precision_3540_firmware < 1.10.1 Yes
Hardware dell precision_3540 - No
Operating System dell precision_3541_firmware < 1.11.1 Yes
Hardware dell precision_3541 - No
Operating System dell precision_3550_firmware < 1.4.3 Yes
Hardware dell precision_3550 - No
Operating System dell precision_3551_firmware < 1.4.3 Yes
Hardware dell precision_3551 - No
Operating System dell precision_3640_tower_firmware < 1.4.3 Yes
Hardware dell precision_3640_tower - No
Operating System dell precision_5540_firmware < 1.9.1 Yes
Hardware dell precision_5540 - No
Operating System dell precision_5550_firmware < 1.6.1 Yes
Hardware dell precision_5550 - No
Operating System dell precision_5750_firmware < 1.6.3 Yes
Hardware dell precision_5750 - No
Operating System dell precision_7540_firmware < 1.11.2 Yes
Hardware dell precision_7540 - No
Operating System dell precision_7550_firmware < 1.6.2 Yes
Hardware dell precision_7550 - No
Operating System dell precision_7740_firmware < 1.11.2 Yes
Hardware dell precision_7740 - No
Operating System dell precision_7750_firmware < 1.6.2 Yes
Hardware dell precision_7750 - No
Operating System dell vostro_3401_firmware < 1.1.0 Yes
Hardware dell vostro_3401 - No
Operating System dell vostro_3491_firmware < 1.12.0 Yes
Hardware dell vostro_3491 - No
Operating System dell vostro_3501_firmware < 1.1.0 Yes
Hardware dell vostro_3501 - No
Operating System dell vostro_3591_firmware < 1.12.0 Yes
Hardware dell vostro_3591 - No
Operating System dell vostro_3681_firmware < 1.3.1 Yes
Hardware dell vostro_3681 - No
Operating System dell vostro_3881_firmware < 1.3.1 Yes
Hardware dell vostro_3881 - No
Operating System dell vostro_3888_firmware < 1.3.1 Yes
Hardware dell vostro_3888 - No
Operating System dell vostro_5490_firmware < 1.12.0 Yes
Hardware dell vostro_5490 - No
Operating System dell vostro_5590_firmware < 1.12.0 Yes
Hardware dell vostro_5590 - No
Operating System dell vostro_7500_firmware < 1.5.1 Yes
Hardware dell vostro_7500 - No
Operating System dell vostro_7590_firmware < 1.8.0 Yes
Hardware dell vostro_7590 - No
Operating System dell wyse_5470_firmware < 1.6.0 Yes
Hardware dell wyse_5470 - No
Operating System dell xps_13_9300_firmware < 1.4.1 Yes
Hardware dell xps_13_9300 - No
Operating System dell xps_13_9380_firmware < 1.12.0 Yes
Hardware dell xps_13_9380 - No
Operating System dell xps_17_9700_firmware < 1.6.3 Yes
Hardware dell xps_17_9700 - No
Operating System dell xps_7380_firmware < 1.7.0 Yes
Hardware dell xps_7380 - No
Operating System dell xps_7590_firmware < 1.9.1 Yes
Hardware dell xps_7590 - No
Operating System dell xps_7390_2-in-1_firmware < 1.7.1 Yes
Hardware dell xps_7390_2-in-1 * No
Operating System dell xps_9500_firmware < 1.6.1 Yes
Hardware dell xps_9500 * No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For dell's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.