CVE-2021-36323

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-12 · updated 2026-10-08
Weakness: CWE-20

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected products

Dell Alienware 13 R3 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware 15 R3 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware 15 R4 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware 17 R4 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware 17 R5 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware Area 51M R1 Firmware: before 1.15.1 — fixed in 1.15.1
Dell Alienware Area 51M R2 Firmware: before 1.10.0 — fixed in 1.10.0
Dell Alienware Aurora R11 Firmware: before 1.0.9 — fixed in 1.0.9
Dell Alienware Aurora R12 Firmware: before 1.1.7 — fixed in 1.1.7
Dell Alienware Aurora R7 Firmware: before 1.0.25 — fixed in 1.0.25
Dell Alienware Aurora R8 Firmware: before 1.0.17 — fixed in 1.0.17
Dell Alienware Aurora R9 Firmware: before 1.0.14 — fixed in 1.0.14
Dell Alienware Aurora Ryzen Edition Firmware: before 2.2.4 — fixed in 2.2.4
Dell Alienware M15 R1 Firmware: before 2.9.0 — fixed in 2.9.0
Dell Alienware M15 R2 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Alienware M15 R3 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Alienware M17 R1 Firmware: before 2.9.0 — fixed in 2.9.0
Dell Alienware M17 R2 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Alienware M17 R3 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Alienware X15 R1 Firmware: before 1.4.0 — fixed in 1.4.0
Dell Alienware X17 R1 Firmware: before 1.4.0 — fixed in 1.4.0
Dell Chengming 3977 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Chengming 3980 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Chengming 3988 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Chengming 3990 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Chengming 3991 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Embedded Box Pc 5000 Firmware: before 1.11.0 — fixed in 1.11.0
Dell G3 3579 Firmware: before 1.17.0 — fixed in 1.17.0
Dell G3 3590 Firmware: before 1.14.0 — fixed in 1.14.0
Dell G3 3779 Firmware: before 1.17.0 — fixed in 1.17.0

How to fix

Upgrade to a fixed version: Dell Alienware 13 R3 Firmware 1.13.0; Dell Alienware 15 R3 Firmware 1.13.0; Dell Alienware 15 R4 Firmware 1.14.0; Dell Alienware 17 R4 Firmware 1.13.0; Dell Alienware 17 R5 Firmware 1.14.0; Dell Alienware Area 51M R1 Firmware 1.15.1; Dell Alienware Area 51M R2 Firmware 1.10.0; Dell Alienware Aurora R11 Firmware 1.0.9; Dell Alienware Aurora R12 Firmware 1.1.7; Dell Alienware Aurora R7 Firmware 1.0.25; Dell Alienware Aurora R8 Firmware 1.0.17; Dell Alienware Aurora R9 Firmware 1.0.14. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-36323 or the next vulnerability affects your stack