CVE-2021-36324 — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Who exploits it and how urgent it is
A 0–100 score combining confirmed exploitation, ransomware and APT use, public exploits, EPSS and severity.
How the score was calculated
- EPSS 0.2% (30-day exploitation probability)+2
- Technical severity (medium)+3
The score orders the patch queue; it does not replace your asset context (internet exposure, criticality, compensating controls).
Triage
Is it exploited, how likely is exploitation, what does it touch, and how severe do the sources call it.
CISA SSVC assessment CISA
Three decision points CISA publishes for the CVEs it assesses (SSVC 2.0.3). A stakeholder decision, not a severity score.
Remediation
Fixes and mitigations documented by the sources — linked to the original advisory.
No fix documented by the sources we poll. That does not mean none exists: check the vendor advisory.
First 24 hours
Ordered from the record’s own fields — exposure first, because you cannot patch what you have not found. A rule-generated starting point.
- Identify exposed assets running the affected vendor/product/version combinations (Dell Alienware 13 R3 Firmware, Dell Alienware 15 R3 Firmware, Dell Alienware 15 R4 Firmware…).
- No fix documented in the sources: reduce exposure and monitor the vendor advisory.
- Search available logs for exploit probes matching the vulnerability class (input validation), errors and authentication anomalies.
Affected scope
Vendor, product and versions as the sources word them.
| Vendor | Product | Versions | Status | Source |
|---|---|---|---|---|
| Dell | Alienware 13 R3 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware 15 R3 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware 15 R4 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware 17 R4 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware 17 R5 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Area 51m R1 Firmware | < 1.15.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Area 51m R2 Firmware | < 1.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Aurora R11 Firmware | < 1.0.9 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Aurora R12 Firmware | < 1.1.7 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Aurora R7 Firmware | < 1.0.25 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Aurora R8 Firmware | < 1.0.17 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Aurora R9 Firmware | < 1.0.14 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware Aurora Ryzen Edition Firmware | < 2.2.4 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware M15 R1 Firmware | < 2.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware M15 R2 Firmware | < 1.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware M15 R3 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware M17 R1 Firmware | < 2.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware M17 R2 Firmware | < 1.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware M17 R3 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware X15 R1 Firmware | < 1.4.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Alienware X17 R1 Firmware | < 1.4.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Chengming 3977 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Chengming 3980 Firmware | < 2.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Chengming 3988 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Chengming 3990 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Chengming 3991 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | CPG BIOS | < 1.13.0 | Vulnerable | CVE Program (cve.org) e CISA ADP |
| Dell | Embedded Box Pc 5000 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G3 3579 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G3 3590 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G3 3779 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G5 5000 Firmware | < 1.3.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G5 5090 Firmware | < 1.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G5 5587 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G5 5590 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G7 7587 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G7 7588 Firmware | ≤ 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G7 7590 Firmware | ≤ 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | G7 7790 Firmware | ≤ 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 13 5378 Firmware | < 1.34.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 13 5379 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 14 3467 Firmware | < 2.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 14 5468 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 3567 Firmware | < 2.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 5566 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 5578 Firmware | < 1.34.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 5579 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 5582 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 7570 Firmware | < 1.20.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 7572 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 7573 Firmware | < 1.20.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 15 7577 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 17 7773 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3268 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3277 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3280 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3470 Firmware | < 2.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3471 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3476 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3477 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3480 Firmware | < 1.15.0< 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3481 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3576 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3580 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3581 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3668 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3670 Firmware | < 2.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3671 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3780 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3781 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3880 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 3881 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5370 Firmware | < 1.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5400 Firmware | < 1.5.2 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5401 Firmware | < 1.5.2 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5477 Firmware | < 1.2.15 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5480 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5481 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5482 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5490 Firmware | < 1.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5491 Firmware | < 1.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5570 Firmware | < 1.6.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5580 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5680 Firmware | < 2.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 5770 Firmware | < 1.6.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7370 Firmware | < 1.20.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7373 Firmware | < 1.20.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7380 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7386 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7467 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7472 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7567 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7580 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7586 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7590 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7591 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7700 Firmware | < 1.5.2 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7777 Firmware | < 1.2.15 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7786 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Inspiron 7790 Firmware | < 1.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3180 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3189 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3190 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3300 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3310 Firmware | < 1.11.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3379 Firmware | < 1.0.31 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3380 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3390 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3470 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3480 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3490 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3551 Firmware | < 1.7.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3570 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3580 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 3590 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5175 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5179 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5280 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5285 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5288 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5289 Firmware | < 1.24.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5290 Firmware | < 1.18.0< 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5300 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5310 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5400 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5401 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5410 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5411 Firmware | < 1.7.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5480 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5488 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5490 Firmware | < 1.18.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5491 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5500 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5501 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5510 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5511 Firmware | < 1.7.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5580 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5590 Firmware | < 1.18.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 5591 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7200 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7210 Firmware | < 1.8.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7275 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7280 Firmware | < 1.22.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7285 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7290 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7300 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7310 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7370 Firmware | < 1.25.4 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7380 Firmware | < 1.22.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7389 Firmware | < 1.24.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7390 Firmware | < 1.21.0< 1.20.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7400 Firmware | < 1.14.0< 1.13.2 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7410 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7480 Firmware | < 1.22.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 7490 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 9410 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude 9510 Firmware | < 1.7.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude E5270 Firmware | < 1.27.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude E5470 Firmware | < 1.27.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude E5570 Firmware | < 1.27.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude E7270 Firmware | < 1.30.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude E7470 Firmware | < 1.30.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged 5414 Firmware | < 1.30.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged 5420 Firmware | < 1.14.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged 5424 Firmware | < 1.14.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged 7220 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged 7220ex Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged 7424 Firmware | < 1.14.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged Extreme 7214 Firmware | < 1.30.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged Extreme 7414 Firmware | < 1.30.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Latitude Rugged Tablet 7212 Firmware | < 1.34.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3040 Firmware | < 1.16.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3046 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3050 Firmware | < 1.17.0< 1.18.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3060 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3070 Firmware | < 1.9.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3080 Firmware | < 2.2.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3240 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 3280 Firmware | < 1.8.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5040 Firmware | < 1.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5050 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5060 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5070 Firmware | < 1.9.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5080 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5250 Firmware | < 1.18.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5260 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5270 Firmware | < 1.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 5480 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7040 Firmware | < 1.20.2 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7050 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7060 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7070 Firmware | < 1.9.1< 1.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7071 Firmware | < 1.9.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7080 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7440 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7450 Firmware | < 1.18.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7460 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7470 Firmware | < 1.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7480 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7760 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7770 Firmware | < 1.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex 7780 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Optiplex Xe3 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3240 Firmware | < 1.7.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3420 Firmware | < 2.18.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3430 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3431 Firmware | < 1.9.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3440 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3510 Firmware | < 1.27.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3520 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3530 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3540 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3541 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3550 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3620 Firmware | < 2.18.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3630 Firmware | < 2.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3640 Firmware | < 1.8.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 3930 Firmware | < 2.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 5510 Firmware | < 1.18.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 5520 Firmware | < 1.24.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 5530 Firmware | < 1.21.0< 1.15.8 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 5540 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 5720 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 5820 Firmware | < 2.10.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7510 Firmware | < 1.23.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7520 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7530 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7540 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7550 Firmware | < 1.9.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7710 Firmware | < 1.23.3 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7720 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7730 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7740 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7750 Firmware | < 1.9.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7820 Firmware | < 2.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Precision 7920 Firmware | < 2.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 14 3468 Firmware | < 3.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 14 3478 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 14 5468 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 15 3568 Firmware | < 3.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 15 3578 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 15 5568 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 15 7570 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 15 7580 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3070 Firmware | < 2.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3267 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3268 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3470 Firmware | < 2.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3471 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3480 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3481 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3580 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3581 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3583 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3584 Firmware | < 1.14.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3660 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3667 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3668 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3669 Firmware | < 1.17.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3670 Firmware | < 2.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3671 Firmware | < 1.7.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3681 Firmware | < 2.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3881 Firmware | < 2.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 3888 Firmware | < 2.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 5090 Firmware | < 1.9.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 5370 Firmware | < 1.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 5471 Firmware | < 1.19.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 5481 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 5581 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 5880 Firmware | < 1.5.1 | Vulnerable | NIST National Vulnerability Database |
| Dell | Vostro 7590 Firmware | < 1.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Wyse 5070 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Wyse 5470 Firmware | < 1.9.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Wyse 7040 Firmware | < 1.12.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 13 9360 Firmware | < 2.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 13 9370 Firmware | < 1.16.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 13 9380 Firmware | < 1.15.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 15 7590 Firmware | < 1.21.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 15 9560 Firmware | < 1.24.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 15 9575 Firmware | < 1.17.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 27 7760 Firmware | < 2.11.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 7590 Firmware | < 1.13.0 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 8930 Firmware | < 1.1.18 | Vulnerable | NIST National Vulnerability Database |
| Dell | Xps 8940 Firmware | < 2.1.3 | Vulnerable | NIST National Vulnerability Database |
Attack characteristics
The CVSS vector, decoded. It describes the attack, not your exposure to it.
Every base score collected
Sources score independently and may disagree; each row says who scored it and under which version.
| Score | Version | Severity | Expl. | Impact | Scored by |
|---|---|---|---|---|---|
| 7.5 | CVSS 3.1 | High | 0.8 | 6.0 | security_alert@emc.com via NIST National Vulnerability Database |
| 7.5 | CVSS 3.1 | High | — | — | dell via CVE Program (cve.org) e CISA ADP |
| 6.7 | CVSS 3.1 | Medium | 0.8 | 5.9 | nvd@nist.gov via NIST National Vulnerability Database |
| 6.7 | CVSS 3.1 | Medium | — | — | GitHub, Inc. via GitHub Security Advisories |
| 7.2 | CVSS 2.0 | High | 3.9 | 10.0 | nvd@nist.gov via NIST National Vulnerability Database |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (score shown at the top: nvd@nist.gov) Weakness MITRE
Weakness class according to MITRE’s CWE catalog.
EPSS over time FIRST
Oct 13, 2026 → Oct 14, 2026 · 2 reading(s) · max 0.24%
Detection
Read off the CVSS vector and the weakness class. Starting points, not tested rules.
- Local/physical vector: focus on endpoint telemetry (EDR) from affected hosts.
Timeline
What happened to this CVE, newest first.
- 2026
- Affected products added · dell/cpg bios
- SSVC assessment updated
- Record published
- CVSS changed · 6.7
- Source status changed · → Modified
- Record created in this database
- 2021
- CVE published
Source activity
Repeated readings are counted rather than listed.
- 1× References added · Oct 13, 2026 – Oct 13, 2026
- 1× Official description updated · Oct 13, 2026 – Oct 13, 2026
References
3 on the record
Elsewhere on this site
Related CVEs (same products)
- Medium CVE-2021-36343 Improper Input Validation in Dell Precision 5820 Tower Firmware Jan 24, 2022
- Medium CVE-2021-36342 Improper Input Validation in Dell Precision 7510 Firmware Jan 24, 2022
- Medium CVE-2021-36323 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Nov 12, 2021
- Medium CVE-2021-36325 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Nov 12, 2021
Not in any source we poll
Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.
- No fixed version, patch or mitigation documented.
- No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
- No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
- No exploit packet captures, log samples, or incident case IDs supplied.
Answered from this record
Text assembled only from the fields above — no additional claims.
What should defenders know first?
CVE-2021-36324 is "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...", rated Medium. It affects Alienware 13 R3 Firmware (Dell); versions are in the scope table. It is not in CISA KEV, which does not rule out exploitation. CVSS 6.7 describes technical severity. EPSS 0.24% estimates the probability of exploitation in 30 days; neither replaces your asset context. First verify whether exposed or business-critical assets run the affected versions, apply vendor fixes or mitigations, and preserve logs for review.
Comments
Moderated technical discussion. Read the community guidelines.
No comments yet.
Sign in or create an account to comment and suggest corrections.