Dell BIOSConnect stack-based overflow [CVE-2021-21573]

Overview :

A vulnerability classified as critical was found in Dell BIOSConnect (affected version unknown). Affected by this vulnerability is some unknown processing. Upgrading eliminates this vulnerability.

Affected Product(s) :

Alienware m15 R6, Inspiron, OptiPlex, Latitude, Vostro, XPS – version 3

Vulnerability Details :

CVE ID :

CVE-2021-21573

Dell BIOSConnect feature contains a buffer overflow vulnerability.

An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.

Solution :
Dell recommends all customers update to the latest Dell Client BIOS version at the earliest opportunity. Customers who choose not to apply BIOS updates immediately or who are otherwise unable to do so now, should apply the below mitigation.

Dell BIOSConnect stack-based overflow [CVE-2021-21573]

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2025-23208 : ZOT UP TO 2.1.1 API SETUSERGROUPS PRIVILEGES MANAGEMENT

CVE-2024-12867 : ARCTIC SECURITY ARCTIC HUB UP TO 5.5.1872 CONFIGURATION SERVER-SIDE REQUEST FORGERY

CVE-2024-12840 : RED HAT SATELLITE HTTP PROXY SERVER-SIDE REQUEST FORGERY