vciy

CVE-2021-36342

INDEX BUILT · 2026-10-18

No source can show you its own past. This one can.

Print this page to keep the view as it stands on this date. Everything hidden behind a disclosure opens, and every receipt prints with its value.

Dell BIOS contains an improper input validation vulnerability

CVE-2021-363424 of 4 sources documented this
36

rank 36 = 0 + 16 + 0 + 20 + 0

rank@v1 · scheduled

Someone is already using it

CISA KEV catalog · public proof-of-concept · FIRST EPSS

EPSS 0.00251  ·  without this subject the record ranks 36

What it costs you if it fires

NVD CVSS base score, then the CNA's own

CVSS 6.4, from NVD  ·  without this subject the record ranks 20

It is getting worse, not staying still

FIRST EPSS series, rescorings and bad loads removed

no persisting rise in 365 days  ·  without this subject the record ranks 36

How much of the world it touches

NVD CPE configurations

401 products in the CPE ranges  ·  without this subject the record ranks 16

Someone else already set the date

CISA KEV remediation due date

no CISA due date  ·  without this subject the record ranks 36

Hindsight · the state

0.00251EPSSNOT IN KEVas of 2026-10-18
Severity7.5 HIGHreceipt
Harmtotal lossreceipt
Exploitationnone in held sources
Defensefix version namedreceipt
Movementscoring model changedreceipt
PLATEAU10Minimal movement since 2022-01-25, 1602 days at 0.00, as of 2026-06-15. arc-rules@v1

Foresight · where to check next

CVE-2017-1000253CVE-2022-22706Microsoft WindowsApple iOSQualcomm, Inc.Microsoft Windows36342

This record is one instance of CWE-119, improper restriction of operations within the bounds of a memory buffer. The index holds 14429 prior instances of this class, 59 KEV-listed. The nearest of its KEV-listed records are drawn beside this. taxonomy@v1

Full pattern panel

Prior records in this weakness class. Each is its own record, dated and receipted.
Color is a claim, not decoration:the hostile worldthe defenseno signalspoke length is how much of the record matches, not how bad it is

Sources disagree here.

Severity score
Dell7.5 HIGHreceipt
NVD6.4 MEDIUMreceipt
What it costs
DellComplete confidentiality, integrity and availability loss, with impact beyond the vulnerable componentreceipt
NVDComplete confidentiality, integrity and availability lossreceipt

Both shown, dated. We don't pick winners. disagreement-rules@v1

Running Dell CPG BIOS? Check your version

A deterministic range check against the ranges this record publishes. It tells you where a version sits in the record, not whether your deployment is exploitable. No account needed.

Watch this record

Matches your own product list against every record this index holds, and tells you when one of them moves.

What counts as a move

Watch Dell CPG BIOS

Set up a watchlist (free with an account: one stack of three products)

Record your call

Keep your verdict, your reason and the evidence together. The record takes its date when you save it.

Patch by…

Or open an investigation: an incident or a near miss on this CVE, kept with its evidence where anyone in your organisation can find it.

Choose your verdict, then sign in or use an email link. Your first 100 records are free. Evidence is frozen when the record is created.

Private to your organization unless you share it. Put the proof link in your ticket so a reviewer can inspect the basis for your call. See how decision records work.

Harm, if it fires from the vector and the weakness

Written for the ticket you're about to file.

Reachneeds local access · high privileges required · no user interaction · high attack complexityreceipt
ImpactComplete confidentiality, integrity and availability loss, with impact beyond the vulnerable componentreceipt
Scored fromCVSS v3.1 · the CNA's vectorreceipt
Weakness classCWE-119 Improper Restriction of Operations within the Bounds of a Memory Bufferreceipt
Published consequencesCWE-119: Integrity, Confidentiality, Availability: Execute Unauthorized Code or Commands, Modify Memory; Availability, Confidentiality: Read Memory, DoS: Crash, Exit, or Restart, DoS: Resource…cwe-consequences@4.20

CISA KEV & Federal Remediation Deadline from the record and CISA

The fix, and how long it's been waiting.

Fixed in1.14receipt
Patch available sinceNo dated patch-availability record in held sources. The index holds reference URLs without dates and only the current revision of the CVE record, so the day a fix first existed cannot be derived. Only the versions it landed in.
BOD 26-04 deadlineIf the system is reachable from the internet: 14 days. If not: fix at the next system upgrade.derived
Show full BOD 26-04 deadline

CISA has not scored it, so the directive's own defaults apply: automatable no, technical impact total. Calendar days from the KEV listing or from when you find it on a system, whichever is first. Federal agencies are bound from 7 Dec 2026, and contracts often carry it to suppliers. The directive and its table

Exploit Status & Known PoCs a ladder, not a score

Current rung: Nothing observed in held sources.

  • RUNG 1Nothing observed in held sources
  • RUNG 2Proof-of-concept published
  • RUNG 3Exploited in the wild · CISA KEV listed
  • RUNG 4Ransomware campaign use known

Authority who says so

CVSS, the CNA7.5 HIGHreceipt
CVSS, NVD6.4 MEDIUMreceipt
Exploit probability0.00251 · top 85% of all CVEsreceipt
Blast breadth37 products across 2 vendorsderived
Assigned bydellreceipt
Recorded changes11 · last 18 Oct 2026derived

Affected & Fixed Versions as published

Affected productDell CPG BIOSreceipt
Published rangesdell precision 7510 firmware < 1.24.3; dell precision 7520 firmware < 1.22.0; dell precision 7530 firmware < 1.18.2; dell precision 7540 firmware < 1.15.1receipt
Show all 401 published ranges
dell precision 7510 firmware < 1.24.3
dell precision 7520 firmware < 1.22.0
dell precision 7530 firmware < 1.18.2
dell precision 7540 firmware < 1.15.1
dell precision 7550 firmware < 1.10.1
dell precision 7560 firmware < 1.5.0
dell precision 7710 firmware < 1.24.3
dell precision 7720 firmware < 1.22.0
dell precision 7730 firmware < 1.18.2
dell precision 7740 firmware < 1.15.1
dell precision 7750 firmware < 1.10.1
dell precision 7760 firmware < 1.5.0
dell vostro 13 5370 firmware < 1.20.0
dell vostro 14 3468 firmware < 3.10.0
dell vostro 14 3478 firmware < 1.15.0
dell vostro 14 5468 firmware < 1.17.0
dell vostro 14 5471 firmware < 1.20.0
dell vostro 15 3568 firmware < 3.10.0
dell vostro 15 3572 firmware < 1.12.0
dell vostro 15 3578 firmware < 1.15.0
dell vostro 15 5410 firmware < 2.4.1
dell vostro 15 5510 firmware < 2.4.1
dell vostro 15 5568 firmware < 1.17.0
dell vostro 15 7570 firmware < 1.15.0
dell vostro 15 7580 firmware < 1.18.0
dell vostro 3070 firmware < 2.20.0
dell vostro 3267 firmware < 1.18.0
dell vostro 3268 firmware < 1.18.0
dell vostro 5502 firmware < 1.8.0
dell vostro 5581 firmware < 2.12.0
dell vostro 5590 firmware < 1.16.1
dell vostro 5591 firmware < 1.18.0
dell vostro 5880 firmware < 1.6.0
dell vostro 5890 firmware < 1.2.2
dell vostro 7500 firmware < 1.10.0
dell vostro 7510 firmware < 1.2.1
dell vostro 7590 firmware < 1.12.1
dell vostro 3400 firmware < 1.9.0
dell vostro 3401 firmware < 1.9.0
dell vostro 3470 firmware < 2.20.0
dell vostro 3471 firmware < 1.8.0
dell vostro 3480 firmware < 1.16.0
dell vostro 3481 firmware < 1.15.0
dell vostro 3490 firmware < 1.15.0
dell vostro 3500 firmware < 1.9.0
dell vostro 3501 firmware < 1.9.0
dell vostro 3510 firmware < 1.6.0
dell vostro 3562 firmware < 1.19.0
dell vostro 3580 firmware < 1.16.0
dell vostro 3581 firmware < 1.15.0
dell vostro 3582 firmware < 1.11.0
dell vostro 3583 firmware < 1.16.0
dell vostro 3584 firmware < 1.15.0
dell vostro 3590 firmware < 1.15.0
dell vostro 3660 firmware < 1.18.0
dell vostro 3667 firmware < 1.18.0
dell vostro 3668 firmware < 1.18.0
dell vostro 3669 firmware < 1.18.0
dell vostro 3670 firmware < 2.20.0
dell vostro 3671 firmware < 1.8.0
dell vostro 3681 firmware < 2.6.1
dell vostro 3690 firmware < 1.2.2
dell vostro 3881 firmware < 2.6.1
dell vostro 3888 firmware < 2.6.1
dell vostro 3890 firmware < 1.2.2
dell vostro 5090 firmware < 1.10.0
dell vostro 5300 firmware < 1.9.0
dell vostro 5301 firmware < 1.11.0
dell vostro 5310 firmware < 2.5.0
dell vostro 5390 firmware < 1.14.0
dell vostro 5391 firmware < 1.15.0
dell vostro 5401 firmware < 1.9.0
dell vostro 5402 firmware < 1.8.0
dell vostro 5481 firmware < 2.12.0
dell vostro 5490 firmware < 1.16.1
dell vostro 5491 firmware < 1.18.0
dell vostro 5501 firmware < 1.9.0
dell alienware 13 r3 firmware < 1.14.0
dell alienware 15 r3 firmware < 1.14.0
dell alienware 15 r4 firmware < 1.15.0
dell alienware 17 r4 firmware < 1.14.0
dell alienware 17 r5 firmware < 1.15.0
dell alienware area 51m r1 firmware < 1.16.0
dell alienware area 51m r2 firmware < 1.11.0
dell alienware aurora r11 firmware < 1.0.10
dell alienware aurora r12 firmware < 1.1.8
dell alienware aurora r8 firmware < 1.0.18
dell alienware aurora r9 firmware < 1.0.15
dell alienware m15 r1 firmware < 2.10.0
dell alienware m15 r2 firmware < 1.10.0
dell alienware m15 r3 firmware < 1.12.0
dell alienware m15 r4 firmware < 1.6.2
dell alienware m17 r1 firmware < 2.10.0
dell alienware m17 r2 firmware < 1.10.0
dell alienware m17 r3 firmware < 1.12.0
dell alienware m17 r4 firmware < 1.6.2
dell alienware x15 r1 firmware < 1.5.0
dell alienware x17 r1 firmware < 1.5.0
dell chengming 3977 firmware < 1.14.0
dell chengming 3980 firmware < 2.20.0
dell chengming 3988 firmware < 1.8.0
dell chengming 3990 firmware < 1.6.0
dell chengming 3991 firmware < 1.6.0
dell g15 5510 firmware < 1.6.0
dell g15 5511 firmware < 1.6.0
dell g3 3500 firmware < 1.11.0
dell g3 3579 firmware < 1.15.1
dell g3 3590 firmware < 1.15.1
dell g3 3779 firmware < 1.18.0
dell g5 5000 firmware < 1.4.0
dell g5 5090 firmware < 1.10.0
dell g5 5500 firmware < 1.11.0
dell g5 5590 firmware < 1.17.1
dell g7 7500 firmware < 1.11.1
dell g7 7587 firmware < 1.18.0
dell g7 7588 firmware < 1.18.0
dell g7 7590 firmware < 1.17.1
dell g7 7700 firmware < 1.11.1
dell g7 7790 firmware < 1.17.1
dell embedded box pc 5000 firmware < 1.12.0
dell inspiron 13 7370 firmware < 1.21.0
dell inspiron 13 5378 firmware < 1.35.0
dell inspiron 13 5379 firmware < 1.18.0
dell inspiron 13 7000 firmware < 1.15.0
dell inspiron 13 7373 firmware < 1.21.0
dell inspiron 13 7378 firmware < 1.35.0
dell inspiron 14 3467 firmware < 2.17.0
dell inspiron 14 3473 firmware < 1.12.0
dell inspiron 14 5410 firmware < 2.4.1
dell precision 5820 tower firmware < 2.12.1
dell precision 7820 tower firmware < 2.16.1
dell precision 7920 tower firmware < 2.16.1
dell inspiron 15 3567 firmware < 2.17.0
dell inspiron 15 3573 firmware < 1.12.0
dell inspiron 15 5518 firmware < 2.4.1
dell inspiron 15 5566 firmware < 1.16.0
dell inspiron 15 5578 firmware < 1.35.0
dell inspiron 15 5579 firmware < 1.18.0
dell inspiron 15 5582 firmware < 2.12.0
dell inspiron 15 7570 firmware < 1.21.0
dell inspiron 15 7572 firmware < 1.9.0
dell inspiron 15 7573 firmware < 1.21.0
dell inspiron 15 gaming 7577 firmware < 1.15.0
dell inspiron 17 7773 firmware < 1.18.0
dell inspiron 3268 firmware < 1.18.0
dell inspiron 3277 aio firmware < 1.17.0
dell inspiron 3280 firmware < 1.13.0
dell inspiron 3462 firmware < 1.19.0
dell inspiron 3470 firmware < 2.20.0
dell inspiron 3471 firmware < 1.8.0
dell inspiron 3472 firmware < 1.12.0
dell inspiron 3476 firmware < 1.15.0
dell inspiron 3477 aio firmware < 1.17.0
dell inspiron 3480 firmware < 1.16.0
dell inspiron 3480 aio firmware < 1.13.0
dell inspiron 3481 firmware < 1.15.0
dell inspiron 3482 firmware < 1.11.0
dell inspiron 3490 firmware < 1.15.0
dell inspiron 3493 firmware < 1.18.0
dell inspiron 3501 firmware < 1.9.0
dell inspiron 3502 firmware < 1.4.0
dell inspiron 3510 firmware < 1.3.0
dell inspiron 3511 firmware < 1.6.0
dell inspiron 3576 firmware < 1.15.0
dell inspiron 3580 firmware < 1.16.0
dell inspiron 3581 firmware < 1.15.0
dell inspiron 3582 firmware < 1.11.0
dell inspiron 3590 firmware < 1.15.0
dell inspiron 3593 firmware < 1.18.0
dell inspiron 3668 firmware < 1.18.0
dell inspiron 3670 firmware < 2.20.0
dell inspiron 3671 firmware < 1.8.0
dell inspiron 3780 firmware < 1.16.0
dell inspiron 3781 firmware < 1.15.0
dell inspiron 3782 firmware < 1.11.0
dell inspiron 3790 firmware < 1.15.0
dell inspiron 3793 firmware < 1.18.0
dell inspiron 3880 firmware < 1.6.0
dell inspiron 3881 firmware < 1.6.0
dell inspiron 3891 firmware < 1.2.2
dell inspiron 5300 firmware < 1.9.0
dell inspiron 5301 firmware < 1.11.0
dell inspiron 5310 firmware < 2.5.0
dell inspiron 5370 firmware < 1.20.0
dell inspiron 5390 firmware < 1.14.0
dell inspiron 5391 firmware < 1.15.0
dell inspiron 5400 2-in-1 firmware < 1.9.0
dell inspiron 5400 aio firmware < 1.6.0
dell inspiron 5401 firmware < 1.9.0
dell inspiron 5401 aio firmware < 1.6.0
dell inspiron 5402 firmware < 1.8.0
dell inspiron 5406 2-in-1 firmware < 1.8.0
dell inspiron 5408 firmware < 1.9.0
dell inspiron 5409 firmware < 1.8.0
dell inspiron 5410 firmware < 2.4.0
dell inspiron 5477 aio firmware < 1.2.16
dell inspiron 5480 firmware < 2.12.0
dell inspiron 5481 firmware < 2.12.0
dell inspiron 5482 firmware < 2.12.0
dell inspiron 5490 firmware < 1.16.1
dell inspiron 5490 aio firmware < 1.11.0
dell inspiron 5491 2-in-1 firmware < 1.12.1
dell inspiron 5493 firmware < 1.18.0
dell inspiron 5494 firmware < 1.15.0
dell inspiron 5498 firmware < 1.16.1
dell inspiron 5501 firmware < 1.9.0
dell inspiron 5502 firmware < 1.8.0
dell inspiron 5508 firmware < 1.9.0
dell inspiron 5509 firmware < 1.8.0
dell inspiron 5570 firmware < 1.7.0
dell inspiron 5580 firmware < 2.12.0
dell inspiron 5583 firmware < 1.16.0
dell inspiron 5584 firmware < 1.16.0
dell inspiron 5590 firmware < 1.16.1
dell inspiron 5591 2-in-1 firmware < 1.12.1
dell inspiron 5593 firmware < 1.18.0
dell inspiron 5594 firmware < 1.16.1
dell inspiron 5598 firmware < 1.16.1
dell inspiron 5680 firmware < 2.8.0
dell inspiron 5770 firmware < 1.7.0
dell inspiron 7300 firmware < 1.11.0
dell inspiron 7300 2-in-1 firmware < 1.5.0
dell inspiron 7306 2-in-1 firmware < 1.8.0
dell inspiron 7380 firmware < 1.15.0
dell inspiron 7386 firmware < 1.12.0
dell inspiron 7390 firmware < 1.15.0
dell inspiron 7391 firmware < 1.13.1
dell inspiron 7400 firmware < 1.11.0
dell inspiron 7472 firmware < 1.9.0
dell inspiron 7490 firmware < 1.10.0
dell inspiron 7500 firmware < 1.10.0
dell inspiron 7500 2-in-1 firmware < 1.5.0
dell inspiron 7500 2-in-1 firmware > 1.5.0 < 1.9.0
dell inspiron 7501 firmware < 1.10.0
dell inspiron 7506 2-in-1 firmware < 1.8.0
dell inspiron 7510 firmware < 1.2.1
dell inspiron 7580 firmware < 1.15.0
dell inspiron 7586 firmware < 1.12.0
dell inspiron 7590 firmware < 1.12.1
dell inspiron 7590 firmware > 1.12.1 < 1.15.0
dell inspiron 7591 firmware < 1.12.1
dell inspiron 7591 firmware > 1.12.1 < 1.13.1
dell inspiron 7610 firmware < 1.2.1
dell latitude 13 7370 ultrabook firmware < 1.26.3
dell inspiron 7700 aio firmware < 1.6.0
dell inspiron 7706 2-in-1 firmware < 1.8.0
dell inspiron 7777 aio firmware < 1.2.16
dell inspiron 7786 firmware < 1.12.0
dell inspiron 7790 firmware < 1.11.0
dell inspiron 7791 firmware < 1.13.1
dell inspiron 5491 aio firmware < 1.11.0
dell latitude 12 5289 2-in-1 firmware < 1.25.0
dell latitude 12 7280 ultrabook firmware < 1.23.0
dell latitude 12 7285 firmware < 1.13.0
dell latitude 12 rugged extreme 7214 firmware < 1.31.0
dell latitude 12 rugged tablet 7212 firmware < 1.35.0
dell latitude 13 7389 2-in-1 firmware < 1.25.0
dell latitude 13 7390 2-in-1 firmware < 1.21.0
dell latitude 14 rugged 5414 firmware < 1.31.0
dell latitude 3120 firmware < 1.4.1
dell latitude 3180 firmware < 1.16.0
dell latitude 3189 firmware < 1.16.0
dell latitude 3190 firmware < 1.17.1
dell latitude 3190 2-in-1 firmware < 1.17.1
dell latitude 3300 firmware < 1.13.0
dell latitude 3301 firmware < 1.12.1
dell latitude 3310 firmware < 1.12.1
dell latitude 3310 2-in-1 firmware < 1.11.1
dell latitude 3320 firmware < 1.7.0
dell latitude 3379 firmware < 1.0.32
dell latitude 3380 firmware < 1.16.0
dell latitude 3390 firmware < 1.17.0
dell latitude 3400 firmware < 1.20.0
dell latitude 3410 firmware < 1.11.1
dell latitude 3420 firmware < 1.12.0
dell latitude 3470 firmware < 1.22.0
dell latitude 3480 firmware < 1.18.0
dell latitude 3490 firmware < 1.17.0
dell latitude 3500 firmware < 1.20.0
dell latitude 3510 firmware < 1.11.1
dell latitude 3520 firmware < 1.12.0
dell latitude 3551 firmware < 1.8.1
dell latitude 3570 firmware < 1.22.0
dell latitude 3580 firmware < 1.18.0
dell latitude 3590 firmware < 1.17.0
dell latitude 5175 firmware < 1.12.0
dell latitude 5179 firmware < 1.12.0
dell latitude 5280 firmware < 1.22.0
dell latitude 5285 2-in-1 firmware < 1.15.0
dell latitude 5288 firmware < 1.22.0
dell latitude 5290 firmware < 1.19.0
dell latitude 5290 2-in-1 firmware < 1.18.0
dell latitude 5300 firmware < 1.18.1
dell latitude 5300 2-in-1 firmware < 1.18.1
dell latitude 5310 firmware < 1.9.1
dell latitude 5310 2 in 1 firmware < 1.9.1
dell latitude 5320 firmware < 1.13.0
dell latitude 5400 firmware < 1.13.0
dell latitude 5401 firmware < 1.15.1
dell latitude 5410 firmware < 1.8.1
dell latitude 5411 firmware < 1.8.1
dell latitude 5420 firmware < 1.13.1
dell latitude 5480 firmware < 1.22.0
dell latitude 5488 firmware < 1.22.0
dell latitude 5490 firmware < 1.19.0
dell latitude 5491 firmware < 1.17.2
dell latitude 5500 firmware < 1.13.0
dell latitude 5501 firmware < 1.15.1
dell latitude 5510 firmware < 1.8.1
dell latitude 5511 firmware < 1.8.1
dell latitude 5520 firmware < 1.13.0
dell latitude 5521 firmware < 1.6.0
dell latitude 5580 firmware < 1.22.0
dell latitude 5590 firmware < 1.19.0
dell latitude 5591 firmware < 1.17.2
dell latitude 7200 2-in-1 firmware < 1.15.1
dell latitude 7210 2-in-1 firmware < 1.9.1
dell latitude 7275 2-in-1 firmware < 1.12.0
dell latitude 7290 firmware < 1.22.0
dell latitude 7300 firmware < 1.15.1
dell latitude 7310 firmware < 1.9.1
dell latitude 7320 firmware < 1.11.3
dell latitude 7320 detachable firmware < 1.7.0
dell latitude 7380 firmware < 1.23.0
dell latitude 7390 firmware < 1.22.0
dell latitude 7400 firmware < 1.15.1
dell latitude 7400 2-in-1 firmware < 1.14.1
dell latitude 7410 firmware < 1.9.1
dell latitude 7414 rugged extreme firmware < 1.31.0
dell latitude 7420 firmware < 1.11.3
dell latitude 7480 firmware < 1.23.0
dell latitude 7490 firmware < 1.22.0
dell latitude 7520 firmware < 1.11.3
dell latitude 9410 firmware < 1.9.1
dell latitude 9420 firmware < 1.6.0
dell latitude 9510 firmware < 1.8.1
dell latitude 9520 firmware < 1.8.0
dell latitude e5270 firmware < 1.28.3
dell latitude e5470 firmware < 1.28.3
dell latitude e5570 firmware < 1.28.3
dell latitude e7270 firmware < 1.31.3
dell latitude e7470 firmware < 1.31.3
dell latitude rugged 5420 firmware < 1.15.0
dell latitude rugged 5424 firmware < 1.15.0
dell latitude rugged 7220 firmware < 1.15.1
dell latitude rugged 7220ex firmware < 1.15.1
dell latitude rugged 7424 firmware < 1.15.0
dell latitude 5421 firmware < 1.6.1
dell optiplex 3040 firmware < 1.17.1
dell optiplex 3046 firmware < 1.14.0
dell optiplex 3050 firmware < 1.18.0
dell optiplex 3050 aio firmware < 1.19.0
dell optiplex 3060 firmware < 1.15.0
dell optiplex 3070 firmware < 1.10.0
dell optiplex 3080 firmware < 2.3.1
dell optiplex 3090 firmware < 1.5.0
dell optiplex 3240 all-in-one firmware < 1.14.0
dell optiplex 3280 all-in-one firmware < 1.9.0
dell optiplex 5040 firmware < 1.20.0
dell optiplex 5050 firmware < 1.18.0
dell optiplex 5060 firmware < 1.15.0
dell optiplex 5070 firmware < 1.10.0
dell optiplex 5080 firmware < 1.6.0
dell optiplex 5090 tower firmware < 1.2.1
dell optiplex 5250 firmware < 1.19.0
dell optiplex 5260 all-in-one firmware < 1.16.0
dell optiplex 5270 all-in-one firmware < 1.11.0
dell optiplex 5480 all-in-one firmware < 1.9.0
dell optiplex 5490 aio firmware < 1.5.2
dell optiplex 7040 firmware < 1.21.0
dell optiplex 7050 firmware < 1.18.0
dell optiplex 7060 firmware < 1.15.0
dell optiplex 7070 firmware < 1.10.0
dell optiplex 7070 uff firmware < 1.10.1
dell optiplex 7071 firmware < 1.10.0
dell optiplex 7080 firmware < 1.6.0
dell optiplex 7090 tower firmware < 1.2.1
dell optiplex 7090 uff firmware < 1.5.0
dell optiplex 7440 aio firmware < 1.17.0
dell optiplex 7450 firmware < 1.19.0
dell optiplex 7460 all in one firmware < 1.16.0
dell optiplex 7470 all-in-one firmware < 1.11.0
dell optiplex 7480 all-in-one firmware < 1.9.0
dell optiplex 7490 aio firmware < 1.5.2
dell optiplex 7760 aio firmware < 1.16.0
dell optiplex 7770 all-in-one firmware < 1.11.0
dell optiplex 7780 all-in-one firmware < 1.9.0
dell optiplex xe3 firmware < 1.15.0
dell precision 3240 cff firmware < 1.8.0
dell precision 3420 tower firmware < 2.19.0
dell precision 3430 tower firmware < 1.15.0
dell precision 3431 tower firmware < 1.10.0
dell precision 3440 firmware < 1.6.0
dell precision 3450 firmware < 1.2.2
dell precision 3510 firmware < 1.28.3
dell precision 3520 firmware < 1.22.0
dell precision 3530 firmware < 1.17.2
dell precision 3540 firmware < 1.13.0
dell precision 3541 firmware < 1.15.1
dell precision 3550 firmware < 1.8.1
more ranges not held
Fixed in1.14receipt

A rung lights from a row in the index, never from an assessment. "Held sources" is the true scope of the claim: this index reads the CVE record, NVD, CISA KEV, FIRST's EPSS and public proof-of-concept repositories, and it does not observe attacks.

Unaudited dollar value2 of 3 inputs carry a receipt
Exposure$12,500over the next 30 days, if this record is yours
Movementno material movementthe record holds only daily drift and scoring model releases
Basisassumeda published average, not your estate

$12,500 = $4.99M incident cost x 1 exposure x 0.00251 likelihood

udv@v1 · unaudited · wrong for you until you say what you run

$4.99M is the cost of a breach that happened, from IBM Cost of a Data Breach Report 2026, global average. It is not the value of any asset of yours. That average already covers breaches of every severity, so scaling it by exposure understates a partial-impact record. That is an assumption, not a measurement. Your own asset value goes in the decision record.

Did this affect your environment?Answering needs an account.

Attack path

Local accessrequires high privilegesDell CPG BIOSCWE-119 buffer overflowAdjacent componentsscope changeFull compromise (C/I/A)C:H / I:H / A:Hexploits CWE-119scope changedata compromise

What it is stated by the CNA

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. receipt

NVD's analysis a second authority

severity
6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
weakness
CWE-119; CWE-20
affected versions
dell precision 7510 firmware < 1.24.3; dell precision 7520 firmware < 1.22.0; dell precision 7530 firmware < 1.18.2; and 398 more, listed in full below
also scored by
security_alert@emc.com 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

The CNA scored it 7.5 and NVD 6.4. Both are shown because both were published; we do not pick one.

check it yourself dell.com receipt

Movement the material steps

25 Jan 20220.00389
7 Mar 20234.2e-4 · scoring model v2023.03.01
17 Mar 20250.00108 · scoring model v2025.03.14
15 Jun 20260.00251 · scoring model v2026.06.15
Show all 11 observations
25 Jan 20220.00389
4 Feb 20220.02559
5 Feb 20220.01036
7 Mar 20234.2e-4
8 Mar 20230.00042
17 Mar 20250.00108
19 Mar 20250.0011
29 Mar 20250.0019
30 Mar 20250.0011
27 May 20250.0004
15 Jun 20260.00251

11 observations held. A highlighted step crossed a promotion threshold. A step marked with a scoring model moved because the instrument was replaced, not because the vulnerability changed. receipt

The full biography

EPSS 0.00251Published2022-01-24Index as of2026-06-15

The record had been public for 4 years, 4 months when this index was last written.

Published 2022-01-24 receipt · Index as of 2026-06-15 derived

The pattern, elsewhere

This record is one instance of CWE-119, improper restriction of operations within the bounds of a memory buffer. The index holds 14429 prior instances of this class, 59 KEV-listed. The nearest of its KEV-listed records are drawn beside this. cwe-consequences@4.20

CVE-2017-1000253matches 5 of 9KEV listed · 2017receipt
CVE-2022-22706matches 5 of 9KEV listed · 2022receipt
CVE-2020-0796 · Microsoft Windows 10 Version 1903 for 32-bit…matches 5 of 10KEV listed · 2020receipt
CVE-2026-20700 · Apple iOS and iPadOSmatches 5 of 10KEV listed · 2026receipt
CVE-2023-33106 · Qualcomm, Inc. Snapdragonmatches 5 of 10KEV listed · 2023receipt
CVE-2023-36033 · Microsoft Windows 10 Version 1809matches 5 of 10KEV listed · 2023receipt

"Matches n of m" counts the attributes the two records can both be compared on: the CVSS metrics they share a version of, any weakness class beyond this one, and the vendor. fit-rules@v1

14429 records in this class held. The six above are drawn from the ones CISA has listed as exploited, ranked by how much of the record matches this one. That is why every one of them is KEV-listed: the pool is, so the colour on those spokes says nothing the pool has not already said.

No curated product neighbourhood is held for this product, so the records above are the nearest this index can name. The neighbourhood table covers a small set of products and is extended by hand.

Siblings and hubs

Records related to this one

No record cites this identifier and it carries no alias. Its defect family is below.

Its defect family

dell cpg bios

CVE-2020-5388CVE-2021-36343CVE-2022-24415CVE-2022-24416CVE-2022-24419CVE-2022-24420CVE-2022-24421CVE-2022-32491

Grouped by shared product and weakness, not by shared vulnerability. Each record's own state is on its own page.

Family membership: held values

The whole family, and what merged it

Nothing we hold separates this record from the others in its defect family. This page is kept and dated, and the defect family's own page is the one we offer for indexing: the whole group.

Browse the index from here

Every CVE we hold for DellAdded to CISA KEV this weekThe whole index

These are index-wide views, not findings about CVE-2021-36342.

What usually comes next

Brief on CVE-2021-36342Held facts, dated and print-ready. Sign in to add the researched section.What moved across the whole index this week?The material set, not the catalogue.Do we run Dell CPG BIOS?Match a product list against what we hold. Product names, not versions.

Everything above needs no account. What is below is work: assembling it, scoping it to your estate, watching it, and handing it to someone else.

Everything on this page is free. Public data. Withholding it protects nothing.