Show filters
24 Total Results
Displaying 11-20 of 24
Sort by:
Attacker Value
Unknown

CVE-2022-26861

Disclosure Date: August 04, 2022 (last updated October 08, 2023)
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
Attacker Value
Unknown

CVE-2022-26860

Disclosure Date: August 04, 2022 (last updated October 08, 2023)
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
Attacker Value
Unknown

CVE-2022-26859

Disclosure Date: August 04, 2022 (last updated October 08, 2023)
Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.
Attacker Value
Unknown

CVE-2022-26858

Disclosure Date: August 04, 2022 (last updated October 08, 2023)
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
Attacker Value
Unknown

CVE-2021-36325

Disclosure Date: November 01, 2021 (last updated October 07, 2023)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Attacker Value
Unknown

CVE-2021-36324

Disclosure Date: November 01, 2021 (last updated October 07, 2023)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Attacker Value
Unknown

CVE-2021-36285

Disclosure Date: September 16, 2021 (last updated November 28, 2024)
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack.
Attacker Value
Unknown

CVE-2021-36284

Disclosure Date: September 16, 2021 (last updated November 28, 2024)
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack.
Attacker Value
Unknown

CVE-2021-21522

Disclosure Date: September 16, 2021 (last updated November 28, 2024)
Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.
Attacker Value
Unknown

CVE-2021-36343

Disclosure Date: January 12, 2021 (last updated October 07, 2023)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.