Read the docs
TI-2021-14651 Aliases CVE-2021-36283GHSA-v8xg-293g-mwp4

Improper input validation in Dell CPG BIOS

Priority LOW 32CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Why it matters now

EPSS 0.00249 16th percentileScored 2026-11-07
Fix Fixed CPG BIOS (Dell): 1.3.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellCPG BIOSbefore 1.3.11.3.1Patch availableCNA
  • CPG BIOS VendorDell Affected before 1.3.1 Fixed in 1.3.1 Patch available CNA

CPE configurations NVD · 170

CPEVersionsRoleVendor
cpe:2.3:o:dell:chengming_3990_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:chengming_3990:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:chengming_3991_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:chengming_3991:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:g3_15_3500_firmware:*:*:*:*:*:*:*:*before 1.7.1VulnerableDell
cpe:2.3:h:dell:g3_15_3500:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:g3_15_3590_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:g3_15_3590:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:g3_15_5500_firmware:*:*:*:*:*:*:*:*before 1.7.1VulnerableDell
cpe:2.3:h:dell:g3_15_5500:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
  • cpe:2.3:o:dell:chengming_3990_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:chengming_3990:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:chengming_3991_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:chengming_3991:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:g3_15_3500_firmware:*:*:*:*:*:*:*:* Versions before 1.7.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:g3_15_3500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:g3_15_3590_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:g3_15_3590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:g3_15_5500_firmware:*:*:*:*:*:*:*:* Versions before 1.7.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:g3_15_5500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 160 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dell:inspiron_3493_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_3493:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3501_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableDell
cpe:2.3:h:dell:inspiron_3501:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3593_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_3593:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3793_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_3793:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3880_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:inspiron_3880:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3881_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:inspiron_3881:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5400_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:inspiron_5400_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5490_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_5490:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5493_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_5493:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5498_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_5498:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5590_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_5590:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5593_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_5593:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5598_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_5598:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7391_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.9.1VulnerableDell
cpe:2.3:h:dell:inspiron_7391_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7500_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableDell
cpe:2.3:h:dell:inspiron_7500:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7500_2-in-1_silver_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:inspiron_7500_2-in-1_silver:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7501_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableDell
cpe:2.3:h:dell:inspiron_7501:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7590_firmware:*:*:*:*:*:*:*:*before 1.8.0VulnerableDell
cpe:2.3:h:dell:inspiron_7590:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7591_firmware:*:*:*:*:*:*:*:*before 1.8.0VulnerableDell
cpe:2.3:h:dell:inspiron_7591:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_3310_firmware:*:*:*:*:*:*:*:*before 1.8.3VulnerableDell
cpe:2.3:h:dell:latitude_3310:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.17.1VulnerableDell
cpe:2.3:h:dell:latitude_3310_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5300_firmware:*:*:*:*:*:*:*:*before 1.12.1VulnerableDell
cpe:2.3:h:dell:latitude_5300:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.12.1VulnerableDell
cpe:2.3:h:dell:latitude_5300_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5310_firmware:*:*:*:*:*:*:*:*before 1.4.2VulnerableDell
cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5310_2_in_1_firmware:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableDell
cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:*before 1.10.1VulnerableDell
cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5401_firmware:*:*:*:*:*:*:*:*before 1.11.1VulnerableDell
cpe:2.3:h:dell:latitude_5401:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5410_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:latitude_5410:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5411_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:latitude_5411:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5500_firmware:*:*:*:*:*:*:*:*before 1.10.1VulnerableDell
cpe:2.3:h:dell:latitude_5500:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5511_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:latitude_5511:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7200_2_in_1_firmware:*:*:*:*:*:*:*:*before 1.10.1VulnerableDell
cpe:2.3:h:dell:latitude_7200_2_in_1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7210_2_in_1_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableDell
cpe:2.3:h:dell:latitude_7210_2_in_1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7220ex_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:*before 1.9.1VulnerableDell
cpe:2.3:h:dell:latitude_7220ex_rugged_extreme_tablet:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7300_firmware:*:*:*:*:*:*:*:*before 1.11.1VulnerableDell
cpe:2.3:h:dell:latitude_7300:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7310_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableDell
cpe:2.3:h:dell:latitude_7310:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7400_firmware:*:*:*:*:*:*:*:*before 1.11.1VulnerableDell
cpe:2.3:h:dell:latitude_7400:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.10.0VulnerableDell
cpe:2.3:h:dell:latitude_7400_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7410_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableDell
cpe:2.3:h:dell:latitude_7410:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_9410_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableDell
cpe:2.3:h:dell:latitude_9410:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_9510_firmware:*:*:*:*:*:*:*:*before 1.4.2VulnerableDell
cpe:2.3:h:dell:latitude_9510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_3080_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:optiplex_3080:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_3280_aio_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:optiplex_3280_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_5080_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:optiplex_5080:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_5480_aio_firmware:*:*:*:*:*:*:*:*before 1.4.0VulnerableDell
cpe:2.3:h:dell:optiplex_5480_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_7080_firmware:*:*:*:*:*:*:*:*before 1.3.10VulnerableDell
cpe:2.3:h:dell:optiplex_7080:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_7480_aio_firmware:*:*:*:*:*:*:*:*before 1.6.2VulnerableDell
cpe:2.3:h:dell:optiplex_7480_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_7780_aio_firmware:*:*:*:*:*:*:*:*before 1.6.2VulnerableDell
cpe:2.3:h:dell:optiplex_7780_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3440_firmware:*:*:*:*:*:*:*:*before 1.3.10VulnerableDell
cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3540_firmware:*:*:*:*:*:*:*:*before 1.10.1VulnerableDell
cpe:2.3:h:dell:precision_3540:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3541_firmware:*:*:*:*:*:*:*:*before 1.11.1VulnerableDell
cpe:2.3:h:dell:precision_3541:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3550_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:precision_3550:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3551_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:precision_3551:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3640_tower_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:precision_3640_tower:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_5540_firmware:*:*:*:*:*:*:*:*before 1.9.1VulnerableDell
cpe:2.3:h:dell:precision_5540:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_5550_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableDell
cpe:2.3:h:dell:precision_5550:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_5750_firmware:*:*:*:*:*:*:*:*before 1.6.3VulnerableDell
cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_7540_firmware:*:*:*:*:*:*:*:*before 1.11.2VulnerableDell
cpe:2.3:h:dell:precision_7540:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_7550_firmware:*:*:*:*:*:*:*:*before 1.6.2VulnerableDell
cpe:2.3:h:dell:precision_7550:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_7740_firmware:*:*:*:*:*:*:*:*before 1.11.2VulnerableDell
cpe:2.3:h:dell:precision_7740:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_7750_firmware:*:*:*:*:*:*:*:*before 1.6.2VulnerableDell
cpe:2.3:h:dell:precision_7750:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3401_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableDell
cpe:2.3:h:dell:vostro_3401:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3491_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_3491:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3501_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableDell
cpe:2.3:h:dell:vostro_3501:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3591_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_3591:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3681_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:vostro_3681:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3881_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:vostro_3881:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3888_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableDell
cpe:2.3:h:dell:vostro_3888:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5490_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_5490:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5590_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_5590:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_7500_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableDell
cpe:2.3:h:dell:vostro_7500:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_7590_firmware:*:*:*:*:*:*:*:*before 1.8.0VulnerableDell
cpe:2.3:h:dell:vostro_7590:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:wyse_5470_firmware:*:*:*:*:*:*:*:*before 1.6.0VulnerableDell
cpe:2.3:h:dell:wyse_5470:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_13_9300_firmware:*:*:*:*:*:*:*:*before 1.4.1VulnerableDell
cpe:2.3:h:dell:xps_13_9300:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_13_9380_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:xps_13_9380:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_17_9700_firmware:*:*:*:*:*:*:*:*before 1.6.3VulnerableDell
cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_7380_firmware:*:*:*:*:*:*:*:*before 1.7.0VulnerableDell
cpe:2.3:h:dell:xps_7380:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_7590_firmware:*:*:*:*:*:*:*:*before 1.9.1VulnerableDell
cpe:2.3:h:dell:xps_7590:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_7390_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.7.1VulnerableDell
cpe:2.3:h:dell:xps_7390_2-in-1:*:*:*:*:*:*:*:*all versionsRunning onDell
cpe:2.3:o:dell:xps_9500_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableDell
cpe:2.3:h:dell:xps_9500:*:*:*:*:*:*:*:*all versionsRunning onDell
  • cpe:2.3:o:dell:inspiron_3493_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3493:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3501_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3593_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3593:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3793_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3793:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3880_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3880:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3881_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5400_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5400_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5490_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5493_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5493:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5498_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5498:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5590_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5593_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5593:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5598_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5598:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7391_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.9.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7391_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7500_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7500_2-in-1_silver_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7500_2-in-1_silver:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7501_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7590_firmware:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7591_firmware:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7591:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_3310_firmware:*:*:*:*:*:*:*:* Versions before 1.8.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_3310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.17.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_3310_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5300_firmware:*:*:*:*:*:*:*:* Versions before 1.12.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.12.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5300_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5310_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5310_2_in_1_firmware:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5401_firmware:*:*:*:*:*:*:*:* Versions before 1.11.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5410_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5411_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5500_firmware:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5511_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7200_2_in_1_firmware:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7200_2_in_1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7210_2_in_1_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7210_2_in_1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7220ex_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* Versions before 1.9.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7220ex_rugged_extreme_tablet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7300_firmware:*:*:*:*:*:*:*:* Versions before 1.11.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7310_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7400_firmware:*:*:*:*:*:*:*:* Versions before 1.11.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.10.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7400_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7410_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_9410_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_9410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_9510_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_9510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_3080_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_3080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_3280_aio_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_3280_aio:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_5080_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_5080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_5480_aio_firmware:*:*:*:*:*:*:*:* Versions before 1.4.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_5480_aio:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_7080_firmware:*:*:*:*:*:*:*:* Versions before 1.3.10 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_7080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_7480_aio_firmware:*:*:*:*:*:*:*:* Versions before 1.6.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_7480_aio:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_7780_aio_firmware:*:*:*:*:*:*:*:* Versions before 1.6.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_7780_aio:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3440_firmware:*:*:*:*:*:*:*:* Versions before 1.3.10 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3540_firmware:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3541_firmware:*:*:*:*:*:*:*:* Versions before 1.11.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3541:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3550_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3551_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3551:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3640_tower_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3640_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_5540_firmware:*:*:*:*:*:*:*:* Versions before 1.9.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_5540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_5550_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_5550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_5750_firmware:*:*:*:*:*:*:*:* Versions before 1.6.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_7540_firmware:*:*:*:*:*:*:*:* Versions before 1.11.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_7540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_7550_firmware:*:*:*:*:*:*:*:* Versions before 1.6.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_7550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_7740_firmware:*:*:*:*:*:*:*:* Versions before 1.11.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_7740:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_7750_firmware:*:*:*:*:*:*:*:* Versions before 1.6.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_7750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3401_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3491_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3491:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3501_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3591_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3591:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3681_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3681:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3881_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3888_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3888:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5490_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5590_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_7500_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_7500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_7590_firmware:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_7590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:wyse_5470_firmware:*:*:*:*:*:*:*:* Versions before 1.6.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:wyse_5470:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_13_9300_firmware:*:*:*:*:*:*:*:* Versions before 1.4.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_13_9300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_13_9380_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_13_9380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_17_9700_firmware:*:*:*:*:*:*:*:* Versions before 1.6.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_7380_firmware:*:*:*:*:*:*:*:* Versions before 1.7.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_7380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_7590_firmware:*:*:*:*:*:*:*:* Versions before 1.9.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_7590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_7390_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.7.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_7390_2-in-1:*:*:*:*:*:*:*:* Versions all versions Running on ·Dell
  • cpe:2.3:o:dell:xps_9500_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_9500:*:*:*:*:*:*:*:* Versions all versions Running on ·Dell

Remediation

  • Fix · CNA CPG BIOS (Dell) Fixed in 1.3.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-36283
  2. 2026-10-03 Alias added: GHSA-v8xg-293g-mwp4

References

  • TI-2024-35208 Weak authentication in Dell Client Platform BIOS CVSS 3.1HIGH 8.2
  • TI-2022-14131 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
  • TI-2022-14130 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
  • TI-2022-10105 Dell BIOS versions contain an Insecure Automated Optimization vulnerability. CVSS 3.1HIGH 7.9
  • TI-2022-14135 Stack-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.8
  • TI-2022-14129 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 7.8
See all 60 →

Sources