Buffer overflow in Dell products - CVE-2021-21573

Vulnerability identifier: #VU54384

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-21573

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to compromise the affected system.

The vulnerability exists due to a boundary error within Dell BIOSConnect feature. A local user with privileged access to the system can bypass UEFI restrictions and execute arbitrary code.

Inspiron 7610
Vostro 15 7510
Inspiron 15 7510
XPS 13 9305
Vostro 5890
Vostro 3890
Vostro 3690
Inspiron 3891
Latitude 3120
Precision 7760
Precision 7560
XPS 17 9710
Precision 5760
OptiPlex 5090 Tower
OptiPlex 7090 Tower
Precision 3450
OptiPlex 3090 UFF
Precision 3650 MT
OptiPlex 7090 UFF
Inspiron 7500 2n1 - Silver
OptiPlex 7490 All-in-One
Inspiron 7500 2n1 - Black
OptiPlex 5490 AIO
Inspiron 7300 2n1
Precision 5560
XPS 15 9510
Alienware m15 R6
Dell G15 5511
OptiPlex 5080
Inspiron 7700 AIO
Dell G15 5510
Latitude 3320
OptiPlex 7080
Vostro 5880
Precision 3440
Inspiron 5400 AIO
Inspiron 5401 AIO
Latitude 9420
ChengMing 3990
Inspiron 3880
ChengMing 3991
Inspiron 3881
Inspiron 5402
Inspiron 7306 2n1
Inspiron 5509
Inspiron 5502
Inspiron 5409
Inspiron 5406 2n1
Vostro 5402
Vostro 5502
Inspiron 7706 2n1
Inspiron 7506 2n1
Latitude 9520
Precision 3550
Latitude 9510
Precision 3551
Vostro 3500
Vostro 3501
Vostro 3400
Inspiron 3501
Latitude 5410
Latitude 5411
Latitude 5511
Latitude 5510
Precision 3640
Latitude 7410
Inspiron 5400 2n1
Latitude 5310
Latitude 5310 2 in 1
OptiPlex 7780 All-in-One
OptiPlex 7480 All-in-One
OptiPlex 3280 All-in-One
Latitude 7210 2-in-1
Latitude 7310
Latitude 9410
Vostro 5300
Inspiron 5300
Latitude 5520
Latitude 7320
Latitude 5320 2-in-1
Latitude 5320
Latitude 7520
Precision 3560
Latitude 7420
Inspiron 5508
Vostro 5501
Inspiron 5401
Vostro 5401
Inspiron 5408
Inspiron 5501
Inspiron 7501
Vostro 7500
Precision 7750
Latitude 3520
Inspiron 7500
Latitude 3420
Latitude 5420
Precision 7550
Inspiron 7300
XPS 15 9500
Precision 5550
Vostro 5301
Inspiron 7400
Inspiron 5301
XPS 17 9700
Precision 17 M5750
Dell G3 3500
Dell G5 5500
Latitude 3510
Latitude 3410
Dell G7 7700
Dell G7 7500
Inspiron 5310
Vostro 5310
Inspiron 5410 2-in-1
OptiPlex 3080
XPS 13 2in1 9310
Vostro 3888
Vostro 3881
Vostro 3681
XPS 13 9310

Install updates from vendor's website.

Inspiron 7610 - update to 1.0.4
Vostro 15 7510 - update to 1.0.4
Inspiron 15 7510 - update to 1.0.4
XPS 13 9305 - update to 1.0.8
Vostro 5890 - update to 1.0.11
Vostro 3890 - update to 1.0.11
Vostro 3690 - update to 1.0.11
Inspiron 3891 - update to 1.0.11
Latitude 3120 - update to 1.1.0
Precision 7760 - update to 1.1.2
Precision 7560 - update to 1.1.2
XPS 17 9710 - update to 1.1.3
Precision 5760 - update to 1.1.3
OptiPlex 5090 Tower - update to 1.1.35
OptiPlex 7090 Tower - update to 1.1.35
Precision 3450 - update to 1.1.35
OptiPlex 3090 UFF - update to 1.2.0
Precision 3650 MT - update to 1.2.0
OptiPlex 7090 UFF - update to 1.2.0
Inspiron 7500 2n1 - Silver - update to 1.3.0
OptiPlex 7490 All-in-One - update to 1.3.0
Inspiron 7500 2n1 - Black - update to 1.3.0
OptiPlex 5490 AIO - update to 1.3.0
Inspiron 7300 2n1 - update to 1.3.0
Precision 5560 - update to 1.3.2
XPS 15 9510 - update to 1.3.2
Alienware m15 R6 - update to 1.3.3
Dell G15 5511 - update to 1.3.3
OptiPlex 5080 - update to 1.4.0
Inspiron 7700 AIO - update to 1.4.0
Dell G15 5510 - update to 1.4.0
Latitude 3320 - update to 1.4.0
OptiPlex 7080 - update to 1.4.0
Vostro 5880 - update to 1.4.0
Precision 3440 - update to 1.4.0
Inspiron 5400 AIO - update to 1.4.0
Inspiron 5401 AIO - update to 1.4.0
Latitude 9420 - update to 1.4.1
ChengMing 3990 - update to 1.4.1
Inspiron 3880 - update to 1.4.1
ChengMing 3991 - update to 1.4.1
Inspiron 3881 - update to 1.4.1
Inspiron 5402 - update to 1.5.1
Inspiron 7306 2n1 - update to 1.5.1
Inspiron 5509 - update to 1.5.1
Inspiron 5502 - update to 1.5.1
Inspiron 5409 - update to 1.5.1
Inspiron 5406 2n1 - update to 1.5.1
Vostro 5402 - update to 1.5.1
Vostro 5502 - update to 1.5.1
Inspiron 7706 2n1 - update to 1.5.1
Inspiron 7506 2n1 - update to 1.5.1
Latitude 9520 - update to 1.5.2
Precision 3550 - update to 1.6.0
Latitude 9510 - update to 1.6.0
Precision 3551 - update to 1.6.0
Vostro 3500 - update to 1.6.0
Vostro 3501 - update to 1.6.0
Vostro 3400 - update to 1.6.0
Inspiron 3501 - update to 1.6.0
Latitude 5410 - update to 1.6.0
Latitude 5411 - update to 1.6.0
Latitude 5511 - update to 1.6.0
Latitude 5510 - update to 1.6.0
Precision 3640 - update to 1.6.2
Latitude 7410 - update to 1.7.0
Inspiron 5400 2n1 - update to 1.7.0
Latitude 5310 - update to 1.7.0
Latitude 5310 2 in 1 - update to 1.7.0
OptiPlex 7780 All-in-One - update to 1.7.0
OptiPlex 7480 All-in-One - update to 1.7.0
OptiPlex 3280 All-in-One - update to 1.7.0
Latitude 7210 2-in-1 - update to 1.7.0
Latitude 7310 - update to 1.7.0
Latitude 9410 - update to 1.7.0
Vostro 5300 - update to 1.7.1
Inspiron 5300 - update to 1.7.1
Latitude 5520 - update to 1.7.1
Latitude 7320 - update to 1.7.1
Latitude 5320 2-in-1 - update to 1.7.1
Latitude 5320 - update to 1.7.1
Latitude 7520 - update to 1.7.1
Precision 3560 - update to 1.7.1
Latitude 7420 - update to 1.7.1
Inspiron 5508 - update to 1.7.2
Vostro 5501 - update to 1.7.2
Inspiron 5401 - update to 1.7.2
Vostro 5401 - update to 1.7.2
Inspiron 5408 - update to 1.7.2
Inspiron 5501 - update to 1.7.2
Inspiron 7501 - update to 1.8.0
Vostro 7500 - update to 1.8.0
Precision 7750 - update to 1.8.0
Latitude 3520 - update to 1.8.0
Inspiron 7500 - update to 1.8.0
Latitude 3420 - update to 1.8.0
Latitude 5420 - update to 1.8.0
Precision 7550 - update to 1.8.0
Inspiron 7300 - update to 1.8.1
XPS 15 9500 - update to 1.8.1
Precision 5550 - update to 1.8.1
Vostro 5301 - update to 1.8.1
Inspiron 7400 - update to 1.8.1
Inspiron 5301 - update to 1.8.1
XPS 17 9700 - update to 1.8.2
Precision 17 M5750 - update to 1.8.2
Dell G3 3500 - update to 1.9.0
Dell G5 5500 - update to 1.9.0
Latitude 3510 - update to 1.9.0
Latitude 3410 - update to 1.9.0
Dell G7 7700 - update to 1.9.0
Dell G7 7500 - update to 1.9.0
Inspiron 5310 - update to 2.1.0
Vostro 5310 - update to 2.1.0
Inspiron 5410 2-in-1 - update to 2.1.0
OptiPlex 3080 - update to 2.1.1
XPS 13 2in1 9310 - update to 2.3.3
Vostro 3888 - update to 2.4.0
Vostro 3881 - update to 2.4.0
Vostro 3681 - update to 2.4.0
XPS 13 9310 - update to 3.0.0

• https://www.dell.com/support/kbdoc/en-us/000188682

• Multiple vulnerabilities in Dell BIOSConnect and HTTPS Boot features