PT-2021-14621 · Dell · Dell Biosconnect

Jesse Michael + 1 · Published 2021-06-24 · Updated 2021-06-30 · CVE-2021-21574

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell BIOSConnect (affected versions not specified)

Description The Dell BIOSConnect feature contains a buffer overflow issue. An authenticated malicious admin user with local access to the system may potentially exploit this to run arbitrary code and bypass UEFI restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2021-21574

Affected Products

Dell Biosconnect

References · 3

• https://osv.dev/vulnerability/CVE-2021-21574 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21574 · Security Note
• https://dell.com/support/kbdoc/en-us/000188682 · Vendor Advisory