CVE-2021-36283

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-09-28 · updated 2026-06-17
Weakness: CWE-20

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected products

Dell Chengming 3990 Firmware: before 1.3.1 — fixed in 1.3.1
Dell Chengming 3991 Firmware: before 1.3.1 — fixed in 1.3.1
Dell G3 15 3500 Firmware: before 1.7.1 — fixed in 1.7.1
Dell G3 15 3590 Firmware: before 1.12.0 — fixed in 1.12.0
Dell G3 15 5500 Firmware: before 1.7.1 — fixed in 1.7.1
Dell Inspiron 3493 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 3501 Firmware: before 1.1.0 — fixed in 1.1.0
Dell Inspiron 3593 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 3793 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 3880 Firmware: before 1.3.1 — fixed in 1.3.1
Dell Inspiron 3881 Firmware: before 1.3.1 — fixed in 1.3.1
Dell Inspiron 5400 2-In-1 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 5490 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 5493 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 5498 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 5590 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 5593 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 5598 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 7391 2-In-1 Firmware: before 1.9.1 — fixed in 1.9.1
Dell Inspiron 7500 2-In-1 Silver Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 7500 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Inspiron 7501 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Inspiron 7590 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 7591 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Latitude 3310 2-In-1 Firmware: before 1.17.1 — fixed in 1.17.1
Dell Latitude 3310 Firmware: before 1.8.3 — fixed in 1.8.3
Dell Latitude 5300 2-In-1 Firmware: before 1.12.1 — fixed in 1.12.1
Dell Latitude 5300 Firmware: before 1.12.1 — fixed in 1.12.1
Dell Latitude 5310 2 In 1 Firmware: 1.4.2
Dell Latitude 5310 Firmware: before 1.4.2 — fixed in 1.4.2

How to fix

Upgrade to a fixed version: Dell Chengming 3990 Firmware 1.3.1; Dell Chengming 3991 Firmware 1.3.1; Dell G3 15 3500 Firmware 1.7.1; Dell G3 15 3590 Firmware 1.12.0; Dell G3 15 5500 Firmware 1.7.1; Dell Inspiron 3493 Firmware 1.12.0; Dell Inspiron 3501 Firmware 1.1.0; Dell Inspiron 3593 Firmware 1.12.0; Dell Inspiron 3793 Firmware 1.12.0; Dell Inspiron 3880 Firmware 1.3.1; Dell Inspiron 3881 Firmware 1.3.1; Dell Inspiron 5400 2-In-1 Firmware 1.5.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-36283 or the next vulnerability affects your stack