Multiple vulnerabilities in Dell products

Published: 2022-08-12

Risk	Medium
Patch available	YES
Number of vulnerabilities	16
CVE-ID	CVE-2021-0159 CVE-2022-0004 CVE-2022-21151 CVE-2022-0005 CVE-2021-0155 CVE-2021-0188 CVE-2021-33103 CVE-2021-33124 CVE-2021-0189 CVE-2021-33122 CVE-2021-0190 CVE-2021-33123 CVE-2021-0153 CVE-2021-0154 CVE-2022-21131 CVE-2022-21136
CWE-ID	CWE-20 CWE-254 CWE-200 CWE-252 CWE-466 CWE-441 CWE-787 CWE-823 CWE-691 CWE-248 CWE-284
Exploitation vector	Local
Public exploit	N/A
Vulnerable software Subscribe	XPS 8940 Hardware solutions / Firmware XPS 8930 Hardware solutions / Firmware XPS 7590 Hardware solutions / Firmware XPS 17 9700 Hardware solutions / Firmware XPS 15 9575 2-in-1 Hardware solutions / Firmware XPS 15 9500 Hardware solutions / Firmware XPS 15 7590 Hardware solutions / Firmware XPS 13 9380 Hardware solutions / Firmware XPS 13 9370 Hardware solutions / Firmware XPS 13 9365 2-in-1 Hardware solutions / Firmware XPS 13 9360 Hardware solutions / Firmware XPS 13 9300 Hardware solutions / Firmware XPS 13 7390 2-in-1 Hardware solutions / Firmware XPS 13 7390 Hardware solutions / Firmware Wyse 7040 Thin Client Hardware solutions / Firmware Wyse 5470 All-In-One Hardware solutions / Firmware Wyse 5470 Hardware solutions / Firmware Wyse 5070 Hardware solutions / Firmware Vostro 7590 Hardware solutions / Firmware Vostro 7500 Hardware solutions / Firmware Vostro 5890 Hardware solutions / Firmware Vostro 5880 Hardware solutions / Firmware Vostro 5591 Hardware solutions / Firmware Vostro 5590 Hardware solutions / Firmware Vostro 5581 Hardware solutions / Firmware Vostro 5501 Hardware solutions / Firmware Vostro 5491 Hardware solutions / Firmware Vostro 5490 Hardware solutions / Firmware Vostro 5481 Hardware solutions / Firmware Vostro 5471 Hardware solutions / Firmware Vostro 5401 Hardware solutions / Firmware Vostro 5391 Hardware solutions / Firmware Vostro 5390 Hardware solutions / Firmware Vostro 5370 Hardware solutions / Firmware Vostro 5300 Hardware solutions / Firmware Vostro 5090 Hardware solutions / Firmware Vostro 3890 Hardware solutions / Firmware Vostro 3888 Hardware solutions / Firmware Vostro 3881 Hardware solutions / Firmware Vostro 3690 Hardware solutions / Firmware Vostro 3681 Hardware solutions / Firmware Vostro 3671 Hardware solutions / Firmware Vostro 3670 Hardware solutions / Firmware Vostro 3669 Hardware solutions / Firmware Vostro 3668 Hardware solutions / Firmware Vostro 3667 Hardware solutions / Firmware Vostro 3660 Hardware solutions / Firmware Vostro 3590 Hardware solutions / Firmware Vostro 3584 Hardware solutions / Firmware Vostro 3583 Hardware solutions / Firmware Vostro 3582 Hardware solutions / Firmware Vostro 3581 Hardware solutions / Firmware Vostro 3580 Hardware solutions / Firmware Vostro 3510 Hardware solutions / Firmware Vostro 3501 Hardware solutions / Firmware Vostro 3490 Hardware solutions / Firmware Vostro 3481 Hardware solutions / Firmware Vostro 3480 Hardware solutions / Firmware Vostro 3471 Hardware solutions / Firmware Vostro 3470 Hardware solutions / Firmware Vostro 3401 Hardware solutions / Firmware Vostro 3268 Hardware solutions / Firmware Vostro 3267 Hardware solutions / Firmware Vostro 3070 Hardware solutions / Firmware Vostro 15 7580 Hardware solutions / Firmware Vostro 15 5568 Hardware solutions / Firmware Precision 7920 Tower Hardware solutions / Firmware Precision 7920 Rack Hardware solutions / Firmware Precision 7910 Rack Hardware solutions / Firmware Precision 7820 Tower Hardware solutions / Firmware Precision 7760 Hardware solutions / Firmware Precision 7750 Hardware solutions / Firmware Precision 7740 Hardware solutions / Firmware Precision 7730 Hardware solutions / Firmware Precision 7720 Hardware solutions / Firmware Precision 7710 Hardware solutions / Firmware Precision 7560 Hardware solutions / Firmware Precision 7550 Hardware solutions / Firmware Precision 7540 Hardware solutions / Firmware Precision 7530 Hardware solutions / Firmware Precision 7520 Hardware solutions / Firmware Precision 5820 Tower Hardware solutions / Firmware Precision 5750 Hardware solutions / Firmware Precision 5720 AIO Hardware solutions / Firmware Precision 5550 Hardware solutions / Firmware Precision 5540 Hardware solutions / Firmware Precision 5530 2-in-1 Hardware solutions / Firmware Precision 5530 Hardware solutions / Firmware Precision 5520 Hardware solutions / Firmware Precision 5510 Hardware solutions / Firmware Precision 3930 Rack Hardware solutions / Firmware Precision 3650 Tower Hardware solutions / Firmware Precision 3640 Tower Hardware solutions / Firmware Precision 3630 Tower Hardware solutions / Firmware Precision 3620 Tower Hardware solutions / Firmware Precision 3551 Hardware solutions / Firmware Precision 3550 Hardware solutions / Firmware Precision 3541 Hardware solutions / Firmware Precision 3540 Hardware solutions / Firmware Precision 3530 Hardware solutions / Firmware Precision 3520 Hardware solutions / Firmware Precision 3510 Hardware solutions / Firmware Precision 3450 Hardware solutions / Firmware Precision 3440 Hardware solutions / Firmware Precision 3431 Tower Hardware solutions / Firmware Precision 3430 Tower Hardware solutions / Firmware Precision 3420 Tower Hardware solutions / Firmware OptiPlex 7780 All-in-One Hardware solutions / Firmware OptiPlex 7770 All-In-One Hardware solutions / Firmware OptiPlex 7760 All-In-One Hardware solutions / Firmware OptiPlex 7490 All-in-One Hardware solutions / Firmware OptiPlex 7480 All-in-One Hardware solutions / Firmware OptiPlex 7470 All-In-One Hardware solutions / Firmware OptiPlex 7460 All-In-One Hardware solutions / Firmware OptiPlex 7450 Hardware solutions / Firmware OptiPlex 7440 All-In-One Hardware solutions / Firmware OptiPlex 7090 Tower Hardware solutions / Firmware OptiPlex 7080 Hardware solutions / Firmware OptiPlex 7070 Ultra Hardware solutions / Firmware OptiPlex 7050 Hardware solutions / Firmware OptiPlex 7040 Hardware solutions / Firmware OptiPlex 5490 All-In-One Hardware solutions / Firmware OptiPlex 5480 All-In-One Hardware solutions / Firmware OptiPlex 5270 All-In-One Hardware solutions / Firmware OptiPlex 5260 All-In-One Hardware solutions / Firmware OptiPlex 5250 Hardware solutions / Firmware OptiPlex 5090 Hardware solutions / Firmware OptiPlex 5080 Hardware solutions / Firmware OptiPlex 5070 Hardware solutions / Firmware OptiPlex 5060 Hardware solutions / Firmware OptiPlex 5050 Hardware solutions / Firmware OptiPlex 5040 Hardware solutions / Firmware OptiPlex 3280 All-in-One Hardware solutions / Firmware OptiPlex 3240 All-in-One Hardware solutions / Firmware OptiPlex 3090 Hardware solutions / Firmware OptiPlex 3080 Hardware solutions / Firmware OptiPlex 3070 Hardware solutions / Firmware OptiPlex 3060 Hardware solutions / Firmware OptiPlex 3050 All-In-One Hardware solutions / Firmware OptiPlex 3050 Hardware solutions / Firmware OptiPlex 3046 Hardware solutions / Firmware OptiPlex 3040 Hardware solutions / Firmware OptiPlex 3000 TC Hardware solutions / Firmware Latitude E7470 Hardware solutions / Firmware Latitude E7270 Hardware solutions / Firmware Latitude E5570 Hardware solutions / Firmware Latitude E5470 Hardware solutions / Firmware Latitude E5270 Hardware solutions / Firmware Latitude 9510 Hardware solutions / Firmware Latitude 9410 Hardware solutions / Firmware Latitude 7490 Hardware solutions / Firmware Latitude 7480 Hardware solutions / Firmware Latitude 7424 Rugged Extreme Hardware solutions / Firmware Latitude 7414 Rugged Hardware solutions / Firmware Latitude 7410 Hardware solutions / Firmware Latitude 7400 2-in-1 Hardware solutions / Firmware Latitude 7400 Hardware solutions / Firmware Latitude 7390 2-in-1 Hardware solutions / Firmware Latitude 7390 Hardware solutions / Firmware Latitude 7389 Hardware solutions / Firmware Latitude 7380 Hardware solutions / Firmware Latitude 7370 Hardware solutions / Firmware Latitude 7310 Hardware solutions / Firmware Latitude 7300 Hardware solutions / Firmware Latitude 7290 Hardware solutions / Firmware Latitude 7285 2-in-1 Hardware solutions / Firmware Latitude 7280 Hardware solutions / Firmware Latitude 7275 2-in-1 Hardware solutions / Firmware Latitude 7220EX Rugged Extreme Tablet Hardware solutions / Firmware Latitude 7220 Rugged Extreme Tablet Hardware solutions / Firmware Latitude 7214 Rugged Extreme Hardware solutions / Firmware Latitude 7212 Rugged Extreme Tablet Hardware solutions / Firmware Latitude 7210 2-in-1 Hardware solutions / Firmware Latitude 7200 2-in-1 Hardware solutions / Firmware Latitude 5591 Hardware solutions / Firmware Latitude 5590 Hardware solutions / Firmware Latitude 5580 Hardware solutions / Firmware Latitude 5520 Hardware solutions / Firmware Latitude 5511 Hardware solutions / Firmware Latitude 5510 Hardware solutions / Firmware Latitude 5501 Hardware solutions / Firmware Latitude 5500 Hardware solutions / Firmware Latitude 5491 Hardware solutions / Firmware Latitude 5490 Hardware solutions / Firmware Latitude 5488 Hardware solutions / Firmware Latitude 5480 Hardware solutions / Firmware Latitude 5424 Rugged Hardware solutions / Firmware Latitude 5420 Rugged Hardware solutions / Firmware Latitude 5420 Hardware solutions / Firmware Latitude 5414 Rugged Hardware solutions / Firmware Latitude 5411 Hardware solutions / Firmware Latitude 5410 Hardware solutions / Firmware Latitude 5401 Hardware solutions / Firmware Latitude 5400 Hardware solutions / Firmware Latitude 5310 2-IN-1 Hardware solutions / Firmware Latitude 5310 Hardware solutions / Firmware Latitude 5300 2-IN-1 Hardware solutions / Firmware Latitude 5300 Hardware solutions / Firmware Latitude 5290 2-in-1 Hardware solutions / Firmware Latitude 5290 Hardware solutions / Firmware Latitude 5289 Hardware solutions / Firmware Latitude 5288 Hardware solutions / Firmware Latitude 5285 2-in-1 Hardware solutions / Firmware Latitude 5280 Hardware solutions / Firmware Latitude 5179 Hardware solutions / Firmware Latitude 5175 Hardware solutions / Firmware Latitude 3590 Hardware solutions / Firmware Latitude 3570 Hardware solutions / Firmware Latitude 3520 Hardware solutions / Firmware Latitude 3510 Hardware solutions / Firmware Latitude 3500 Hardware solutions / Firmware Latitude 3490 Hardware solutions / Firmware Latitude 3470 Hardware solutions / Firmware Latitude 3420 Hardware solutions / Firmware Latitude 3410 Hardware solutions / Firmware Latitude 3400 Hardware solutions / Firmware Latitude 3390 Hardware solutions / Firmware Latitude 3379 Hardware solutions / Firmware Latitude 3310 2-in-1 Hardware solutions / Firmware Latitude 3310 Hardware solutions / Firmware Latitude 3301 Hardware solutions / Firmware Latitude 3300 Hardware solutions / Firmware Latitude 3190 2-In-1 Hardware solutions / Firmware Latitude 3190 Hardware solutions / Firmware Latitude 13 3380 Hardware solutions / Firmware Inspiron 5491 AIO Hardware solutions / Firmware Inspiron 7791 Hardware solutions / Firmware Inspiron 7790 Hardware solutions / Firmware Inspiron 7786 Hardware solutions / Firmware Inspiron 7777 Hardware solutions / Firmware Inspiron 7591 Hardware solutions / Firmware Inspiron 7590 Hardware solutions / Firmware Inspiron 7586 Hardware solutions / Firmware Inspiron 7580 Hardware solutions / Firmware Inspiron 7573 2-in-1 Hardware solutions / Firmware Inspiron 7570 Hardware solutions / Firmware Inspiron 7501 Hardware solutions / Firmware Inspiron 7500 2-in-1 Hardware solutions / Firmware Inspiron 7500 Hardware solutions / Firmware Inspiron 7490 Hardware solutions / Firmware Inspiron 7472 Hardware solutions / Firmware Inspiron 7391 Hardware solutions / Firmware Inspiron 7390 Hardware solutions / Firmware Inspiron 7386 Hardware solutions / Firmware Inspiron 7380 Hardware solutions / Firmware Inspiron 7373 2-in-1 Hardware solutions / Firmware Inspiron 7370 Hardware solutions / Firmware Inspiron 7300 2-in-1 Hardware solutions / Firmware Inspiron 7000 Hardware solutions / Firmware Inspiron 5770 Hardware solutions / Firmware Inspiron 5680 Hardware solutions / Firmware Inspiron 5598 Hardware solutions / Firmware Inspiron 5594 Hardware solutions / Firmware Inspiron 5593 Hardware solutions / Firmware Inspiron 5591 2-in-1 Hardware solutions / Firmware Inspiron 5590 Hardware solutions / Firmware Inspiron 5584 Hardware solutions / Firmware Inspiron 5583 Hardware solutions / Firmware Inspiron 5580 Hardware solutions / Firmware Inspiron 5570 Hardware solutions / Firmware Inspiron 5508 Hardware solutions / Firmware Inspiron 5501 Hardware solutions / Firmware Inspiron 5498 Hardware solutions / Firmware Inspiron 5494 Hardware solutions / Firmware Inspiron 5493 Hardware solutions / Firmware Inspiron 5491 2-in-1 Hardware solutions / Firmware Inspiron 5490 AIO Hardware solutions / Firmware Inspiron 5490 Hardware solutions / Firmware Inspiron 5482 Hardware solutions / Firmware Inspiron 5481 2-in-1 Hardware solutions / Firmware Inspiron 5480 Hardware solutions / Firmware Inspiron 5477 Hardware solutions / Firmware Inspiron 5408 Hardware solutions / Firmware Inspiron 5401 Hardware solutions / Firmware Inspiron 5400 2-in-1 Hardware solutions / Firmware Inspiron 5391 Hardware solutions / Firmware Inspiron 5390 Hardware solutions / Firmware Inspiron 5370 Hardware solutions / Firmware Inspiron 5300 Hardware solutions / Firmware Inspiron 3891 Hardware solutions / Firmware Inspiron 3881 Hardware solutions / Firmware Inspiron 3880 Hardware solutions / Firmware Inspiron 3793 Hardware solutions / Firmware Inspiron 3790 Hardware solutions / Firmware Inspiron 3782 Hardware solutions / Firmware Inspiron 3781 Hardware solutions / Firmware Inspiron 3780 Hardware solutions / Firmware Inspiron 3671 Hardware solutions / Firmware Inspiron 3670 Hardware solutions / Firmware Inspiron 3593 Hardware solutions / Firmware Inspiron 3590 Hardware solutions / Firmware Inspiron 3582 Hardware solutions / Firmware Inspiron 3581 Hardware solutions / Firmware Inspiron 3580 Hardware solutions / Firmware Inspiron 3521 Hardware solutions / Firmware Inspiron 3511 Hardware solutions / Firmware Inspiron 3510 Hardware solutions / Firmware Inspiron 3502 Hardware solutions / Firmware Inspiron 3501 Hardware solutions / Firmware Inspiron 3493 Hardware solutions / Firmware Inspiron 3490 Hardware solutions / Firmware Inspiron 3482 Hardware solutions / Firmware Inspiron 3481 Hardware solutions / Firmware Inspiron 3480 Hardware solutions / Firmware Inspiron 3477 Hardware solutions / Firmware Inspiron 3471 Hardware solutions / Firmware Inspiron 3470 Hardware solutions / Firmware Inspiron 3280 Hardware solutions / Firmware Inspiron 3277 Hardware solutions / Firmware Inspiron 15 7572 Hardware solutions / Firmware Inspiron 15 5582 2-in-1 Hardware solutions / Firmware Inspiron 15 3567 Hardware solutions / Firmware Inspiron 14 3467 Hardware solutions / Firmware Dell Latitude 3580 Hardware solutions / Firmware Dell Latitude 3480 Hardware solutions / Firmware Dell G7 17 7790 Hardware solutions / Firmware Dell G7 17 7700 Hardware solutions / Firmware Dell G7 17 7590 Hardware solutions / Firmware Dell G7 15 7588 Hardware solutions / Firmware Dell G7 15 7500 Hardware solutions / Firmware Dell G5 5090 Hardware solutions / Firmware Dell G5 5000 Hardware solutions / Firmware Dell G5 15 5590 Hardware solutions / Firmware Dell G5 15 5587 Hardware solutions / Firmware Dell G5 15 5500 Hardware solutions / Firmware Dell G3 3579 Hardware solutions / Firmware Dell G3 15 3590 Hardware solutions / Firmware Dell G3 15 3500 Hardware solutions / Firmware Dell G15 5510 Hardware solutions / Firmware ChengMing 3991 Hardware solutions / Firmware ChengMing 3990 Hardware solutions / Firmware ChengMing 3988 Hardware solutions / Firmware ChengMing 3980 Hardware solutions / Firmware Alienware m17 R4 Hardware solutions / Firmware Alienware m17 R3 Hardware solutions / Firmware Alienware m17 R2 Hardware solutions / Firmware Alienware m17 R1 Hardware solutions / Firmware Alienware m15 R4 Hardware solutions / Firmware Alienware m15 R3 Hardware solutions / Firmware Alienware m15 R2 Hardware solutions / Firmware Alienware m15 R1 Hardware solutions / Firmware Alienware Aurora R9 Hardware solutions / Firmware Alienware Aurora R8 Hardware solutions / Firmware Alienware Aurora R12 Hardware solutions / Firmware Alienware Aurora R11 Hardware solutions / Firmware Alienware Area 51m R2 Hardware solutions / Firmware Alienware Area 51m R1 Hardware solutions / Firmware Alienware 17 R5 Hardware solutions / Firmware Alienware 17 R4 Hardware solutions / Firmware Alienware 15 R4 Hardware solutions / Firmware Alienware 15 R3 Hardware solutions / Firmware Alienware 13 R3 Hardware solutions / Firmware Precision 3240 Compact Hardware solutions / Other hardware appliances OptiPlex XE3 Hardware solutions / Other hardware appliances OptiPlex 7071 Hardware solutions / Other hardware appliances OptiPlex 7070 Hardware solutions / Other hardware appliances OptiPlex 7060 Hardware solutions / Other hardware appliances Embedded Box PC 5000 Hardware solutions / Other hardware appliances
Vendor	Dell

Security Bulletin

This security bulletin contains information about 16 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU63179

Risk: Low

CVSSv3.1: 6.4 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-0159

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in the BIOS authenticated code module. A local user can pass specially crafted data to the affected module and execute arbitrary code on the system with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Security features bypass

EUVDB-ID: #VU63503

Risk: Low

CVSSv3.1: 5.9 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-0004

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows an attacker to bypass implemented security restrictions.

The vulnerability exists due to hardware debug modes and processor INIT setting allow to override of locks for some Intel Processors in Intel Boot Guard and Intel Trusted Execution Technology. An unauthenticated attacker with physical access to the system can bypass implemented security restrictions and escalate privileges on the system.

The vulnerability can be also exploited remotely by an authenticated attacker on the local network.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Information disclosure

EUVDB-ID: #VU63348

Risk: Low

CVSSv3.1: 5.2 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21151

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to an error during processor optimization removal or modification of security-critical code. A local privileged user can gain access to potentially sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Information disclosure

EUVDB-ID: #VU63528

Risk: Low

CVSSv3.1: 4.6 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-0005

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to sensitive information becomes accessible by physical probing of JTAG interface in the Intel Software Guard Extensions (SGX) Platform. An attacker with physical access to the affected device can gain access to sensitive data.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Unchecked Return Value

EUVDB-ID: #VU63181

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-0155

CWE-ID: CWE-252 - Unchecked Return Value

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to unchecked return value in the BIOS firmware. A local user can gain access to potentially sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Return of pointer value outside of expected range

EUVDB-ID: #VU63180

Risk: Low

CVSSv3.1: 4.6 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-0188

CWE-ID: CWE-466 - Return of pointer value outside of expected range

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary error in the BIOS firmware. A local user can force the firmware to return pointer value outside of expected range and gain access to potentially sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Unintended proxy or intermediary

EUVDB-ID: #VU63178

Risk: Low

CVSSv3.1: 6.5 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-33103

CWE-ID: CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to presence of an unintended proxy in the BIOS authenticated code module. A local user can execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Out-of-bounds write

EUVDB-ID: #VU63177

Risk: Low

CVSSv3.1: 6.5 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-33124

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in the BIOS authenticated code module. A local user can run a specially crafted program to trigger an out-of-bounds write error and execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use of Out-of-range Pointer Offset

EUVDB-ID: #VU63176

Risk: Low

CVSSv3.1: 6.5 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-0189

CWE-ID: CWE-823 - Use of Out-of-range Pointer Offset

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to use of out-of-range pointer offset in the BIOS firmware. A local user can execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Insufficient Control Flow Management

EUVDB-ID: #VU63175

Risk: Low

CVSSv3.1: 6.9 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-33122

CWE-ID: CWE-691 - Insufficient Control Flow Management

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient control flow management in the BIOS firmware. A local user can run a specially crafted program to execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Uncaught Exception

EUVDB-ID: #VU63099

Risk: Low

CVSSv3.1: 7.1 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-0190

CWE-ID: CWE-248 - Uncaught Exception

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to uncaught exception in the BIOS firmware. A local user can run a specially crafted program to execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Improper access control

EUVDB-ID: #VU63083

Risk: Low

CVSSv3.1: 6.9 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-33123

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system

The vulnerability exists due to improper access restrictions in the BIOS authenticated code module. A local user can obtain elevated privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Out-of-bounds write

EUVDB-ID: #VU63082

Risk: Low

CVSSv3.1: 7.1 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-0153

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in the BIOS firmware. A local user can run a specially crafted program to trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Input validation error

EUVDB-ID: #VU63081

Risk: Low

CVSSv3.1: 7.1 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-0154

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in the BIOS firmware. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Improper access control

EUVDB-ID: #VU63346

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21131

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to improper access restrictions. A local user can gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/cs-cz/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Input validation error

EUVDB-ID: #VU63347

Risk: Low

CVSSv3.1: 2 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21136

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A local privileged user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

XPS 8940: before 2.5.1

XPS 8930: before 1.1.23

XPS 7590: before 1.16.0

XPS 17 9700: before 1.14.3

XPS 15 9575 2-in-1: before 1.21.0

XPS 15 9500: before 1.14.0

XPS 15 7590: before 1.24.0

XPS 13 9380: before 1.18.0

XPS 13 9370: before 1.19.0

XPS 13 9365 2-in-1: before 2.21.0

XPS 13 9360: before 2.20.0

XPS 13 9300: before 1.13.0

XPS 13 7390 2-in-1: before 1.16.1

XPS 13 7390: before 1.14.1

Wyse 7040 Thin Client: before 1.16.0

Wyse 5470 All-In-One: before 1.14.1

Wyse 5470: before 1.13.0

Wyse 5070: before 1.16.0

Vostro 7590: before 1.14.0

Vostro 7500: before 1.13.1

Vostro 5890: before 1.10.0

Vostro 5880: before 1.10.1

Vostro 5591: before 1.21.0

Vostro 5590: before 1.18.1

Vostro 5581: before 2.14.0

Vostro 5501: before 1.14.0

Vostro 5491: before 1.21.0

Vostro 5490: before 1.18.1

Vostro 5481: before 2.14.0

Vostro 5471: before 1.22.0

Vostro 5401: before 1.14.0

Vostro 5391: before 1.17.1

Vostro 5390: before 1.16.0

Vostro 5370: before 1.22.0

Vostro 5300: before 1.12.1

Vostro 5090: before 1.13.0

Vostro 3890: before 1.6.0

Vostro 3888: before 2.10.3

Vostro 3881: before 2.10.3

Vostro 3690: before 1.6.0

Vostro 3681: before 2.10.3

Vostro 3671: before 1.10.0

Vostro 3670: before 2.22.0

Vostro 3669: before 1.21.0

Vostro 3668: before 1.21.0

Vostro 3667: before 1.21.0

Vostro 3660: before 1.21.0

Vostro 3590: before 1.17.1

Vostro 3584: before 1.17.0

Vostro 3583: before 1.18.0

Vostro 3582: before 1.14.0

Vostro 3581: before 1.17.0

Vostro 3580: before 1.18.0

Vostro 3510: before 1.11.0

Vostro 3501: before 1.15.0

Vostro 3490: before 1.17.1

Vostro 3481: before 1.17.0

Vostro 3480: before 1.18.0

Vostro 3471: before 1.10.0

Vostro 3470: before 2.22.0

Vostro 3401: before 1.15.0

Vostro 3268: before 1.21.0

Vostro 3267: before 1.21.0

Vostro 3070: before 2.22.0

Vostro 15 7580: before 1.20.0

Vostro 15 5568: before 1.20.0

Precision 7920 Tower: before 2.20.0

Precision 7920 Rack: before 2.14.2

Precision 7910 Rack: before 2.15.0

Precision 7820 Tower: before 2.20.0

Precision 7760: before 1.11.0

Precision 7750: before 1.14.2

Precision 7740: before 1.20.2

Precision 7730: before 1.21.0

Precision 7720: before 1.24.0

Precision 7710: before 1.26.3

Precision 7560: before 1.11.0

Precision 7550: before 1.14.2

Precision 7540: before 1.20.2

Precision 7530: before 1.21.0

Precision 7520: before 1.24.0

Precision 5820 Tower: before 2.16.1

Precision 5750: before 1.14.3

Precision 5720 AIO: before 2.14.0

Precision 5550: before 1.14.0

Precision 5540: before 1.16.0

Precision 5530 2-in-1: before 1.19.8

Precision 5530: before 1.24.0

Precision 5520: before 1.28.0

Precision 5510: before 1.21.0

Precision 3930 Rack: before 2.18.1

Precision 3650 Tower: before 1.10.0

Precision 3640 Tower: before 1.13.1

Precision 3630 Tower: before 2.13.0

Precision 3620 Tower: before 2.21.0

Precision 3551: before 1.12.2

Precision 3550: before 1.12.2

Precision 3541: before 1.19.1

Precision 3540: before 1.17.1

Precision 3530: before 1.20.0

Precision 3520: before 1.24.0

Precision 3510: before 1.30.3

Precision 3450: before 1.6.1

Precision 3440: before 1.10.1

Precision 3431 Tower: before 1.13.0

Precision 3430 Tower: before 1.18.0

Precision 3420 Tower: before 2.21.0

Precision 3240 Compact: before 1.10.1

OptiPlex XE3: before 1.18.0

OptiPlex 7780 All-in-One: before 1.13.1

OptiPlex 7770 All-In-One: before 1.14.0

OptiPlex 7760 All-In-One: before 1.19.0

OptiPlex 7490 All-in-One: before 1.9.0

OptiPlex 7480 All-in-One: before 1.13.1

OptiPlex 7470 All-In-One: before 1.14.0

OptiPlex 7460 All-In-One: before 1.19.0

OptiPlex 7450: before 1.21.0

OptiPlex 7440 All-In-One: before 1.19.0

OptiPlex 7090 Tower: before 1.6.1

OptiPlex 7080: before 1.10.2

OptiPlex 7071: before 1.13.0

OptiPlex 7070 Ultra: before 1.13.2

OptiPlex 7070: before 1.13.0

OptiPlex 7060: before 1.18.0

OptiPlex 7050: before 1.20.0

OptiPlex 7040: before 1.23.0

OptiPlex 5490 All-In-One: before 1.9.0

OptiPlex 5480 All-In-One: before 1.13.1

OptiPlex 5270 All-In-One: before 1.14.0

OptiPlex 5260 All-In-One: before 1.19.0

OptiPlex 5250: before 1.21.0

OptiPlex 5090: before 1.6.0

OptiPlex 5080: before 1.10.3

OptiPlex 5070: before 1.13.0

OptiPlex 5060: before 1.18.0

OptiPlex 5050: before 1.20.0

OptiPlex 5040: before 1.22.0

OptiPlex 3280 All-in-One: before 1.12.1

OptiPlex 3240 All-in-One: before 1.16.0

OptiPlex 3090: before 2.3.3

OptiPlex 3080: before 2.10.3

OptiPlex 3070: before 1.13.0

OptiPlex 3060: before 1.18.0

OptiPlex 3050 All-In-One: before 1.21.0

OptiPlex 3050: before 1.20.0

OptiPlex 3046: before 1.16.0

OptiPlex 3040: before 1.19.1

OptiPlex 3000 TC: before 1.0.7

Latitude E7470: before 1.33.3

Latitude E7270: before 1.33.3

Latitude E5570: before 1.30.3

Latitude E5470: before 1.30.3

Latitude E5270: before 1.30.3

Latitude 9510: before 1.11.1

Latitude 9410: before 1.13.2

Latitude 7490: before 1.25.0

Latitude 7480: before 1.25.0

Latitude 7424 Rugged Extreme: before 1.17.1

Latitude 7414 Rugged: before 1.34.0

Latitude 7410: before 1.13.2

Latitude 7400 2-in-1: before 1.16.0

Latitude 7400: before 1.19.1

Latitude 7390 2-in-1: before 1.24.0

Latitude 7390: before 1.25.0

Latitude 7389: before 1.27.0

Latitude 7380: before 1.25.0

Latitude 7370: before 1.29.3

Latitude 7310: before 1.13.2

Latitude 7300: before 1.19.1

Latitude 7290: before 1.25.0

Latitude 7285 2-in-1: before 1.16.0

Latitude 7280: before 1.25.0

Latitude 7275 2-in-1: before 1.14.0

Latitude 7220EX Rugged Extreme Tablet: before 1.20.0

Latitude 7220 Rugged Extreme Tablet: before 1.20.0

Latitude 7214 Rugged Extreme: before 1.34.0

Latitude 7212 Rugged Extreme Tablet: before 1.38.0

Latitude 7210 2-in-1: before 1.13.1

Latitude 7200 2-in-1: before 1.17.0

Latitude 5591: before 1.20.0

Latitude 5590: before 1.22.0

Latitude 5580: before 1.24.0

Latitude 5520: before 1.17.2

Latitude 5511: before 1.12.2

Latitude 5510: before 1.12.2

Latitude 5501: before 1.19.1

Latitude 5500: before 1.17.1

Latitude 5491: before 1.20.0

Latitude 5490: before 1.22.0

Latitude 5488: before 1.24.0

Latitude 5480: before 1.24.0

Latitude 5424 Rugged: before 1.17.1

Latitude 5420 Rugged: before 1.17.1

Latitude 5420: before 1.17.2

Latitude 5414 Rugged: before 1.34.0

Latitude 5411: before 1.12.2

Latitude 5410: before 1.12.2

Latitude 5401: before 1.19.1

Latitude 5400: before 1.17.1

Latitude 5310 2-IN-1: before 1.12.1

Latitude 5310: before 1.12.1

Latitude 5300 2-IN-1: before 1.21.1

Latitude 5300: before 1.21.1

Latitude 5290 2-in-1: before 1.21.0

Latitude 5290: before 1.22.0

Latitude 5289: before 1.27.0

Latitude 5288: before 1.24.0

Latitude 5285 2-in-1: before 1.17.0

Latitude 5280: before 1.24.0

Latitude 5179: before 1.14.0

Latitude 5175: before 1.14.0

Latitude 3590: before 1.19.0

Latitude 3570: before 1.24.0

Latitude 3520: before 1.16.1

Latitude 3510: before 1.14.1

Latitude 3500: before 1.23.0

Latitude 3490: before 1.19.0

Latitude 3470: before 1.24.0

Latitude 3420: before 1.16.1

Latitude 3410: before 1.14.1

Latitude 3400: before 1.23.0

Latitude 3390: before 1.20.1

Latitude 3379: before 1.0.35

Latitude 3310 2-in-1: before 1.13.1

Latitude 3310: before 1.14.1

Latitude 3301: before 1.21.0

Latitude 3300: before 1.16.0

Latitude 3190 2-In-1: before 1.21.0

Latitude 3190: before 1.21.0

Latitude 13 3380: before 1.18.0

Inspiron 5491 AIO: before 1.14.1

Inspiron 7791: before 1.15.1

Inspiron 7790: before 1.14.1

Inspiron 7786: before 1.14.0

Inspiron 7777: before 1.2.19

Inspiron 7591: before 1.15.1

Inspiron 7590: before 1.17.0

Inspiron 7586: before 1.14.0

Inspiron 7580: before 1.17.0

Inspiron 7573 2-in-1: before 1.23.0

Inspiron 7570: before 1.23.0

Inspiron 7501: before 1.13.1

Inspiron 7500 2-in-1: before 1.14.0

Inspiron 7500: before 1.13.1

Inspiron 7490: before 1.12.1

Inspiron 7472: before 1.11.0

Inspiron 7391: before 1.15.1

Inspiron 7390: before 1.17.0

Inspiron 7386: before 1.14.0

Inspiron 7380: before 1.17.0

Inspiron 7373 2-in-1: before 1.23.0

Inspiron 7370: before 1.23.0

Inspiron 7300 2-in-1: before 1.8.1

Inspiron 7000: before 1.17.1

Inspiron 5770: before 1.9.0

Inspiron 5680: before 2.11.0

Inspiron 5598: before 1.18.1

Inspiron 5594: before 1.17.1

Inspiron 5593: before 1.21.0

Inspiron 5591 2-in-1: before 1.14.1

Inspiron 5590: before 1.18.1

Inspiron 5584: before 1.18.0

Inspiron 5583: before 1.18.0

Inspiron 5580: before 2.14.0

Inspiron 5570: before 1.9.0

Inspiron 5508: before 1.14.0

Inspiron 5501: before 1.14.0

Inspiron 5498: before 1.18.1

Inspiron 5494: before 1.17.1

Inspiron 5493: before 1.21.0

Inspiron 5491 2-in-1: before 1.14.1

Inspiron 5490 AIO: before 1.14.1

Inspiron 5490: before 1.18.1

Inspiron 5482: before 2.14.0

Inspiron 5481 2-in-1: before 2.14.0

Inspiron 5480: before 2.14.0

Inspiron 5477: before 1.2.19

Inspiron 5408: before 1.14.0

Inspiron 5401: before 1.14.0

Inspiron 5400 2-in-1: before 1.14.0

Inspiron 5391: before 1.17.1

Inspiron 5390: before 1.16.0

Inspiron 5370: before 1.22.0

Inspiron 5300: before 1.12.1

Inspiron 3891: before 1.6.0

Inspiron 3881: before 1.10.3

Inspiron 3880: before 1.10.3

Inspiron 3793: before 1.21.0

Inspiron 3790: before 1.17.1

Inspiron 3782: before 1.14.0

Inspiron 3781: before 1.17.0

Inspiron 3780: before 1.18.0

Inspiron 3671: before 1.10.0

Inspiron 3670: before 2.22.0

Inspiron 3593: before 1.21.0

Inspiron 3590: before 1.17.1

Inspiron 3582: before 1.14.0

Inspiron 3581: before 1.17.0

Inspiron 3580: before 1.18.0

Inspiron 3521: before 1.3.0

Inspiron 3511: before 1.13.0

Inspiron 3510: before 1.7.0

Inspiron 3502: before 1.8.0

Inspiron 3501: before 1.15.0

Inspiron 3493: before 1.21.0

Inspiron 3490: before 1.17.1

Inspiron 3482: before 1.14.0

Inspiron 3481: before 1.17.0

Inspiron 3480: before 1.18.0

Inspiron 3477: before 1.20.0

Inspiron 3471: before 1.10.0

Inspiron 3470: before 2.22.0

Inspiron 3280: before 1.15.0

Inspiron 3277: before 1.20.0

Inspiron 15 7572: before 1.11.0

Inspiron 15 5582 2-in-1: before 2.14.0

Inspiron 15 3567: before 2.19.0

Inspiron 14 3467: before 2.19.0

Embedded Box PC 5000: before 1.15.0

Dell Latitude 3580: before 1.20.0

Dell Latitude 3480: before 1.20.0

Dell G7 17 7790: before 1.19.0

Dell G7 17 7700: before 1.14.1

Dell G7 17 7590: before 1.19.0

Dell G7 15 7588: before 1.20.0

Dell G7 15 7500: before 1.14.1

Dell G5 5090: before 1.13.0

Dell G5 5000: before 1.6.1

Dell G5 15 5590: before 1.19.0

Dell G5 15 5587: before 1.20.0

Dell G5 15 5500: before 1.14.3

Dell G3 3579: before 1.20.0

Dell G3 15 3590: before 1.17.0

Dell G3 15 3500: before 1.14.3

Dell G15 5510: before 1.10.1

ChengMing 3991: before 1.10.3

ChengMing 3990: before 1.10.3

ChengMing 3988: before 1.10.0

ChengMing 3980: before 2.22.0

Alienware m17 R4: before 1.10.1

Alienware m17 R3: before 1.16.1

Alienware m17 R2: before 1.14.0

Alienware m17 R1: before 2.13.0

Alienware m15 R4: before 1.10.1

Alienware m15 R3: before 1.16.1

Alienware m15 R2: before 1.14.0

Alienware m15 R1: before 2.13.0

Alienware Aurora R9: before 1.0.19

Alienware Aurora R8: before 1.0.22

Alienware Aurora R12: before 1.1.12

Alienware Aurora R11: before 1.0.14

Alienware Area 51m R2: before 1.15.1

Alienware Area 51m R1: before 1.19.0

Alienware 17 R5: before 1.19.0

Alienware 17 R4: before 1.18.0

Alienware 15 R4: before 1.19.0

Alienware 15 R3: before 1.18.0

Alienware 13 R3: before 1.18.0

External links

http://www.dell.com/support/kbdoc/cs-cz/000199279/dsa-2022-122

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.