CVE-2021-36324
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Risk Assessment
An attacker with local access and authentication could take control of low-level BIOS code, potentially leading to full system compromise and persistent infection.
Recommendation
Update BIOS to the latest vendor version and restrict local access to the system.
Other vulnerabilities in Dell BIOS
See all- CVE-2021-36325High
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
- CVE-2021-36323High
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Original NVD description (English source)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS