Back to the CVE list
CVE-2021-36342

Memory buffer overflow in Dell CPG BIOS

CVSS score

7.5

EPSS probability

%0.3

Risk score

0.0

Published

4 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2021-36342 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2021-36342 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1dellCPG BIOS View
2dellprecision 7510 firmware View
3dellprecision 7510 View
4dellprecision 7520 firmware View
5dellprecision 7520 View
6dellprecision 7530 firmware View
7dellprecision 7530 View
8dellprecision 7540 firmware View
9dellprecision 7540 View
10dellprecision 7550 firmware View
11dellprecision 7550 View
12dellprecision 7560 firmware View
13dellPrecision 7560 View
14dellprecision 7710 firmware View
15dellprecision 7710 View
16dellprecision 7720 firmware View
17dellprecision 7720 View
18dellprecision 7730 firmware View
19dellprecision 7730 View
20dellprecision 7740 firmware View
21dellprecision 7740 View
22dellprecision 7750 firmware View
23dellprecision 7750 View
24dellprecision 7760 firmware View
25dellPrecision 7760 View
26dellvostro 13 5370 firmware View
27dellvostro 13 5370 View
28dellvostro 14 3468 firmware View
29dellvostro 14 3468 View
30dellvostro 14 3478 firmware View
31dellvostro 14 3478 View
32dellvostro 14 5468 firmware View
33dellvostro 14 5468 View
34dellvostro 14 5471 firmware View
35dellvostro 14 5471 View
36dellvostro 15 3568 firmware View
37dellvostro 15 3568 View
38dellvostro 15 3572 firmware View
39dellvostro 15 3572 View
40dellvostro 15 3578 firmware View
41dellvostro 15 3578 View
42dellvostro 15 5410 firmware View
43dellvostro 15 5410 View
44dellvostro 15 5510 firmware View
45dellvostro 15 5510 View
46dellvostro 15 5568 firmware View
47dellvostro 15 5568 View
48dellvostro 15 7570 firmware View
49dellvostro 15 7570 View
50dellvostro 15 7580 firmware View
51dellvostro 15 7580 View
52dellvostro 3070 firmware View
53dellvostro 3070 View
54dellvostro 3267 firmware View
55dellvostro 3267 View
56dellvostro 3268 firmware View
57dellvostro 3268 View
58dellvostro 5502 firmware View
59dellvostro 5502 View
60dellvostro 5581 firmware View
61dellvostro 5581 View
62dellvostro 5590 firmware View
63dellvostro 5590 View
64dellvostro 5591 firmware View
65dellvostro 5591 View
66dellvostro 5880 firmware View
67dellvostro 5880 View
68dellvostro 5890 firmware View
69dellVostro 5890 View
70dellvostro 7500 firmware View
71dellvostro 7500 View
72dellvostro 7510 firmware View
73dellvostro 7510 View
74dellvostro 7590 firmware View
75dellvostro 7590 View
76dellvostro 3400 firmware View
77dellvostro 3400 View
78dellvostro 3401 firmware View
79dellvostro 3401 View
80dellvostro 3470 firmware View
81dellvostro 3470 View
82dellvostro 3471 firmware View
83dellvostro 3471 View
84dellvostro 3480 firmware View
85dellvostro 3480 View
86dellvostro 3481 firmware View
87dellvostro 3481 View
88dellvostro 3490 firmware View
89dellvostro 3490 View
90dellvostro 3500 firmware View
91dellvostro 3500 View
92dellvostro 3501 firmware View
93dellvostro 3501 View
94dellvostro 3510 firmware View
95dellvostro 3510 View
96dellvostro 3562 firmware View
97dellvostro 3562 View
98dellvostro 3580 firmware View
99dellvostro 3580 View
100dellvostro 3581 firmware View
101dellvostro 3581 View
102dellvostro 3582 firmware View
103dellvostro 3582 View
104dellvostro 3583 firmware View
105dellvostro 3583 View
106dellvostro 3584 firmware View
107dellvostro 3584 View
108dellvostro 3590 firmware View
109dellvostro 3590 View
110dellvostro 3660 firmware View
111dellvostro 3660 View
112dellvostro 3667 firmware View
113dellvostro 3667 View
114dellvostro 3668 firmware View
115dellvostro 3668 View
116dellvostro 3669 firmware View
117dellvostro 3669 View
118dellvostro 3670 firmware View
119dellvostro 3670 View
120dellvostro 3671 firmware View
121dellvostro 3671 View
122dellvostro 3681 firmware View
123dellvostro 3681 View
124dellvostro 3690 firmware View
125dellvostro 3690 View
126dellvostro 3881 firmware View
127dellvostro 3881 View
128dellvostro 3888 firmware View
129dellvostro 3888 View
130dellvostro 3890 firmware View
131dellvostro 3890 View
132dellvostro 5090 firmware View
133dellvostro 5090 View
134dellvostro 5300 firmware View
135dellvostro 5300 View
136dellvostro 5301 firmware View
137dellvostro 5301 View
138dellvostro 5310 firmware View
139dellvostro 5310 View
140dellvostro 5390 firmware View
141dellvostro 5390 View
142dellvostro 5391 firmware View
143dellvostro 5391 View
144dellvostro 5401 firmware View
145dellvostro 5401 View
146dellvostro 5402 firmware View
147dellvostro 5402 View
148dellvostro 5481 firmware View
149dellvostro 5481 View
150dellvostro 5490 firmware View
151dellvostro 5490 View
152dellvostro 5491 firmware View
153dellvostro 5491 View
154dellvostro 5501 firmware View
155dellvostro 5501 View
156dellalienware 13 r3 firmware View
157dellalienware 13 r3 View
158dellalienware 15 r3 firmware View
159dellalienware 15 r3 View
160dellalienware 15 r4 firmware View
161dellalienware 15 r4 View
162dellalienware 17 r4 firmware View
163dellalienware 17 r4 View
164dellalienware 17 r5 firmware View
165dellalienware 17 r5 View
166dellalienware area 51m r1 firmware View
167dellalienware area 51m r1 View
168dellalienware area 51m r2 firmware View
169dellAlienware Area 51m R2 View
170dellalienware aurora r11 firmware View
171dellalienware aurora r11 View
172dellalienware aurora r12 firmware View
173dellalienware aurora r12 View
174dellalienware aurora r8 firmware View
175dellalienware aurora r8 View
176dellalienware aurora r9 firmware View
177dellalienware aurora r9 View
178dellalienware m15 r1 firmware View
179dellalienware m15 r1 View
180dellalienware m15 r2 firmware View
181dellalienware m15 r2 View
182dellalienware m15 r3 firmware View
183dellAlienware m15 R3 View
184dellalienware m15 r4 firmware View
185dellAlienware m15 R4 View
186dellalienware m17 r1 firmware View
187dellalienware m17 r1 View
188dellalienware m17 r2 firmware View
189dellalienware m17 r2 View
190dellalienware m17 r3 firmware View
191dellAlienware m17 R3 View
192dellalienware m17 r4 firmware View
193dellAlienware m17 R4 View
194dellalienware x15 r1 firmware View
195dellAlienware x15 R1 View
196dellalienware x17 r1 firmware View
197dellAlienware x17 R1 View
198dellchengming 3977 firmware View
199dellchengming 3977 View
200dellchengming 3980 firmware View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.5CVSS V3_1HIGHCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HCVE CNA
7.5CVSS V31HIGHCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HNVD
7.2CVSS V2—AV:L/AC:L/Au:N/C:C/I:C/A:CNVD
6.4CVSS V31MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-36342 is associated with the following CWEs:

CWE-119: Improper Restriction of Operations within the Bounds of a Memory BufferCWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-36342 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240vendor-advisory

CVSS Vector Radar Chart

7.5 / 10
Attack VectorLocalComplexityHighPrivilegesHighUser Interact.NoneConfidentialityHighIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)High
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

D
dell logo
dell

Weakness Type (CWE & CAPEC)

CWE-119 CWE-20

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-36342"