PT-2021-14620 · Dell · Dell Biosconnect

Jesse Michael + 1 · Published 2021-06-24 · Updated 2021-06-30 · CVE-2021-21573

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell BIOSConnect (affected versions not specified)

Description The Dell BIOSConnect feature contains a buffer overflow issue. An authenticated malicious admin user with local access to the system may potentially exploit this to run arbitrary code and bypass UEFI restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2021-21573

Affected Products

Dell Biosconnect

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-21573 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21573 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000188682 · Vendor Advisory