{"answers":{"affected":"It affects 283 products.","exploited":"There is no known exploitation of CVE-2021-36323 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2021-36323 yet. Limit exposure of the affected software until one is available.","what":"CVE-2021-36323 is a high-severity code injection vulnerability in Dell Alienware Area 51m R2 Firmware, published on 12 Nov 2021. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2021-36323 and fix it if it is affected.\n\nWhat it is: CVE-2021-36323 is a high-severity code injection vulnerability in Dell Alienware Area 51m R2 Firmware, published on 12 Nov 2021. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2021-36323 in the wild and no public exploit code.\n\nAffected product: Dell Alienware Area 51m R2 Firmware. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2021-36323/ (Markdown: https://insights.sbomify.com/CVE-2021-36323/index.md)","id":"CVE-2021-36323","markdown":"https://insights.sbomify.com/CVE-2021-36323/index.md","name":"CVE-2021-36323","record":{"aliases":["GHSA-xpv8-fw7f-p7c6"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["code_execution","privilege_escalation"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Dell BIOS","requires_auth":"high_privilege","summary":"A local authenticated attacker can exploit improper input validation in Dell BIOS to execute arbitrary code in SMRAM, requiring firmware updates.","user_interaction":"not_required","vuln_class":"code_injection"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"dell","cpe":[{"product":"alienware_13_r3_firmware","vendor":"dell"},{"product":"alienware_15_r3_firmware","vendor":"dell"},{"product":"alienware_15_r4_firmware","vendor":"dell"},{"product":"alienware_17_r4_firmware","vendor":"dell"},{"product":"alienware_17_r5_firmware","vendor":"dell"},{"product":"alienware_area_51m_r1_firmware","vendor":"dell"},{"product":"alienware_area_51m_r2_firmware","vendor":"dell"},{"product":"alienware_aurora_r11_firmware","vendor":"dell"},{"product":"alienware_aurora_r12_firmware","vendor":"dell"},{"product":"alienware_aurora_r7_firmware","vendor":"dell"},{"product":"alienware_aurora_r8_firmware","vendor":"dell"},{"product":"alienware_aurora_r9_firmware","vendor":"dell"},{"product":"alienware_aurora_ryzen_edition_firmware","vendor":"dell"},{"product":"alienware_m15_r1_firmware","vendor":"dell"},{"product":"alienware_m15_r2_firmware","vendor":"dell"},{"product":"alienware_m15_r3_firmware","vendor":"dell"},{"product":"alienware_m17_r1_firmware","vendor":"dell"},{"product":"alienware_m17_r2_firmware","vendor":"dell"},{"product":"alienware_m17_r3_firmware","vendor":"dell"},{"product":"alienware_x15_r1_firmware","vendor":"dell"},{"product":"alienware_x17_r1_firmware","vendor":"dell"},{"product":"chengming_3977_firmware","vendor":"dell"},{"product":"chengming_3980_firmware","vendor":"dell"},{"product":"chengming_3988_firmware","vendor":"dell"},{"product":"chengming_3990_firmware","vendor":"dell"},{"product":"chengming_3991_firmware","vendor":"dell"},{"product":"embedded_box_pc_5000_firmware","vendor":"dell"},{"product":"g3_3579_firmware","vendor":"dell"},{"product":"g3_3590_firmware","vendor":"dell"},{"product":"g3_3779_firmware","vendor":"dell"},{"product":"g5_5000_firmware","vendor":"dell"},{"product":"g5_5090_firmware","vendor":"dell"},{"product":"g5_5587_firmware","vendor":"dell"},{"product":"g5_5590_firmware","vendor":"dell"},{"product":"g7_7587_firmware","vendor":"dell"},{"product":"g7_7588_firmware","vendor":"dell"},{"product":"g7_7590_firmware","vendor":"dell"},{"product":"g7_7790_firmware","vendor":"dell"},{"product":"inspiron_13_5378_firmware","vendor":"dell"},{"product":"inspiron_13_5379_firmware","vendor":"dell"},{"product":"inspiron_14_3467_firmware","vendor":"dell"},{"product":"inspiron_14_5468_firmware","vendor":"dell"},{"product":"inspiron_15_3567_firmware","vendor":"dell"},{"product":"inspiron_15_5566_firmware","vendor":"dell"},{"product":"inspiron_15_5578_firmware","vendor":"dell"},{"product":"inspiron_15_5579_firmware","vendor":"dell"},{"product":"inspiron_15_5582_firmware","vendor":"dell"},{"product":"inspiron_15_7570_firmware","vendor":"dell"},{"product":"inspiron_15_7572_firmware","vendor":"dell"},{"product":"inspiron_15_7573_firmware","vendor":"dell"},{"product":"inspiron_15_7577_firmware","vendor":"dell"},{"product":"inspiron_17_7773_firmware","vendor":"dell"},{"product":"inspiron_3268_firmware","vendor":"dell"},{"product":"inspiron_3277_firmware","vendor":"dell"},{"product":"inspiron_3280_firmware","vendor":"dell"},{"product":"inspiron_3470_firmware","vendor":"dell"},{"product":"inspiron_3471_firmware","vendor":"dell"},{"product":"inspiron_3476_firmware","vendor":"dell"},{"product":"inspiron_3477_firmware","vendor":"dell"},{"product":"inspiron_3480_firmware","vendor":"dell"},{"product":"inspiron_3481_firmware","vendor":"dell"},{"product":"inspiron_3576_firmware","vendor":"dell"},{"product":"inspiron_3580_firmware","vendor":"dell"},{"product":"inspiron_3581_firmware","vendor":"dell"},{"product":"inspiron_3668_firmware","vendor":"dell"},{"product":"inspiron_3670_firmware","vendor":"dell"},{"product":"inspiron_3671_firmware","vendor":"dell"},{"product":"inspiron_3780_firmware","vendor":"dell"},{"product":"inspiron_3781_firmware","vendor":"dell"},{"product":"inspiron_3880_firmware","vendor":"dell"},{"product":"inspiron_3881_firmware","vendor":"dell"},{"product":"inspiron_5370_firmware","vendor":"dell"},{"product":"inspiron_5400_firmware","vendor":"dell"},{"product":"inspiron_5401_firmware","vendor":"dell"},{"product":"inspiron_5477_firmware","vendor":"dell"},{"product":"inspiron_5480_firmware","vendor":"dell"},{"product":"inspiron_5481_firmware","vendor":"dell"},{"product":"inspiron_5482_firmware","vendor":"dell"},{"product":"inspiron_5490_firmware","vendor":"dell"},{"product":"inspiron_5491_firmware","vendor":"dell"},{"product":"inspiron_5570_firmware","vendor":"dell"},{"product":"inspiron_5580_firmware","vendor":"dell"},{"product":"inspiron_5680_firmware","vendor":"dell"},{"product":"inspiron_5770_firmware","vendor":"dell"},{"product":"inspiron_7370_firmware","vendor":"dell"},{"product":"inspiron_7373_firmware","vendor":"dell"},{"product":"inspiron_7380_firmware","vendor":"dell"},{"product":"inspiron_7386_firmware","vendor":"dell"},{"product":"inspiron_7467_firmware","vendor":"dell"},{"product":"inspiron_7472_firmware","vendor":"dell"},{"product":"inspiron_7567_firmware","vendor":"dell"},{"product":"inspiron_7580_firmware","vendor":"dell"},{"product":"inspiron_7586_firmware","vendor":"dell"},{"product":"inspiron_7590_firmware","vendor":"dell"},{"product":"inspiron_7591_firmware","vendor":"dell"},{"product":"inspiron_7700_firmware","vendor":"dell"},{"product":"inspiron_7777_firmware","vendor":"dell"},{"product":"inspiron_7786_firmware","vendor":"dell"},{"product":"inspiron_7790_firmware","vendor":"dell"},{"product":"latitude_3180_firmware","vendor":"dell"},{"product":"latitude_3189_firmware","vendor":"dell"},{"product":"latitude_3190_firmware","vendor":"dell"},{"product":"latitude_3300_firmware","vendor":"dell"},{"product":"latitude_3310_firmware","vendor":"dell"},{"product":"latitude_3379_firmware","vendor":"dell"},{"product":"latitude_3380_firmware","vendor":"dell"},{"product":"latitude_3390_firmware","vendor":"dell"},{"product":"latitude_3470_firmware","vendor":"dell"},{"product":"latitude_3480_firmware","vendor":"dell"},{"product":"latitude_3490_firmware","vendor":"dell"},{"product":"latitude_3551_firmware","vendor":"dell"},{"product":"latitude_3570_firmware","vendor":"dell"},{"product":"latitude_3580_firmware","vendor":"dell"},{"product":"latitude_3590_firmware","vendor":"dell"},{"product":"latitude_5175_firmware","vendor":"dell"},{"product":"latitude_5179_firmware","vendor":"dell"},{"product":"latitude_5280_firmware","vendor":"dell"},{"product":"latitude_5285_firmware","vendor":"dell"},{"product":"latitude_5288_firmware","vendor":"dell"},{"product":"latitude_5289_firmware","vendor":"dell"},{"product":"latitude_5290_firmware","vendor":"dell"},{"product":"latitude_5300_firmware","vendor":"dell"},{"product":"latitude_5310_firmware","vendor":"dell"},{"product":"latitude_5400_firmware","vendor":"dell"},{"product":"latitude_5401_firmware","vendor":"dell"},{"product":"latitude_5410_firmware","vendor":"dell"},{"product":"latitude_5411_firmware","vendor":"dell"},{"product":"latitude_5480_firmware","vendor":"dell"},{"product":"latitude_5488_firmware","vendor":"dell"},{"product":"latitude_5490_firmware","vendor":"dell"},{"product":"latitude_5491_firmware","vendor":"dell"},{"product":"latitude_5500_firmware","vendor":"dell"},{"product":"latitude_5501_firmware","vendor":"dell"},{"product":"latitude_5510_firmware","vendor":"dell"},{"product":"latitude_5511_firmware","vendor":"dell"},{"product":"latitude_5580_firmware","vendor":"dell"},{"product":"latitude_5590_firmware","vendor":"dell"},{"product":"latitude_5591_firmware","vendor":"dell"},{"product":"latitude_7200_firmware","vendor":"dell"},{"product":"latitude_7210_firmware","vendor":"dell"},{"product":"latitude_7275_firmware","vendor":"dell"},{"product":"latitude_7280_firmware","vendor":"dell"},{"product":"latitude_7285_firmware","vendor":"dell"},{"product":"latitude_7290_firmware","vendor":"dell"},{"product":"latitude_7300_firmware","vendor":"dell"},{"product":"latitude_7310_firmware","vendor":"dell"},{"product":"latitude_7370_firmware","vendor":"dell"},{"product":"latitude_7380_firmware","vendor":"dell"},{"product":"latitude_7389_firmware","vendor":"dell"},{"product":"latitude_7390_firmware","vendor":"dell"},{"product":"latitude_7400_firmware","vendor":"dell"},{"product":"latitude_7410_firmware","vendor":"dell"},{"product":"latitude_7480_firmware","vendor":"dell"},{"product":"latitude_7490_firmware","vendor":"dell"},{"product":"latitude_9410_firmware","vendor":"dell"},{"product":"latitude_9510_firmware","vendor":"dell"},{"product":"latitude_e5270_firmware","vendor":"dell"},{"product":"latitude_e5470_firmware","vendor":"dell"},{"product":"latitude_e5570_firmware","vendor":"dell"},{"product":"latitude_e7270_firmware","vendor":"dell"},{"product":"latitude_e7470_firmware","vendor":"dell"},{"product":"latitude_rugged_5414_firmware","vendor":"dell"},{"product":"latitude_rugged_5420_firmware","vendor":"dell"},{"product":"latitude_rugged_5424_firmware","vendor":"dell"},{"product":"latitude_rugged_7220_firmware","vendor":"dell"},{"product":"latitude_rugged_7220ex_firmware","vendor":"dell"},{"product":"latitude_rugged_7424_firmware","vendor":"dell"},{"product":"latitude_rugged_extreme_7214_firmware","vendor":"dell"},{"product":"latitude_rugged_extreme_7414_firmware","vendor":"dell"},{"product":"latitude_rugged_tablet_7212_firmware","vendor":"dell"},{"product":"optiplex_3040_firmware","vendor":"dell"},{"product":"optiplex_3046_firmware","vendor":"dell"},{"product":"optiplex_3050_firmware","vendor":"dell"},{"product":"optiplex_3060_firmware","vendor":"dell"},{"product":"optiplex_3070_firmware","vendor":"dell"},{"product":"optiplex_3080_firmware","vendor":"dell"},{"product":"optiplex_3240_firmware","vendor":"dell"},{"product":"optiplex_3280_firmware","vendor":"dell"},{"product":"optiplex_5040_firmware","vendor":"dell"},{"product":"optiplex_5050_firmware","vendor":"dell"},{"product":"optiplex_5060_firmware","vendor":"dell"},{"product":"optiplex_5070_firmware","vendor":"dell"},{"product":"optiplex_5080_firmware","vendor":"dell"},{"product":"optiplex_5250_firmware","vendor":"dell"},{"product":"optiplex_5260_firmware","vendor":"dell"},{"product":"optiplex_5270_firmware","vendor":"dell"},{"product":"optiplex_5480_firmware","vendor":"dell"},{"product":"optiplex_7040_firmware","vendor":"dell"},{"product":"optiplex_7050_firmware","vendor":"dell"},{"product":"optiplex_7060_firmware","vendor":"dell"},{"product":"optiplex_7070_firmware","vendor":"dell"},{"product":"optiplex_7071_firmware","vendor":"dell"},{"product":"optiplex_7080_firmware","vendor":"dell"},{"product":"optiplex_7440_firmware","vendor":"dell"},{"product":"optiplex_7450_firmware","vendor":"dell"},{"product":"optiplex_7460_firmware","vendor":"dell"},{"product":"optiplex_7470_firmware","vendor":"dell"},{"product":"optiplex_7480_firmware","vendor":"dell"},{"product":"optiplex_7760_firmware","vendor":"dell"},{"product":"optiplex_7770_firmware","vendor":"dell"},{"product":"optiplex_7780_firmware","vendor":"dell"},{"product":"optiplex_xe3_firmware","vendor":"dell"},{"product":"precision_3240_firmware","vendor":"dell"},{"product":"precision_3420_firmware","vendor":"dell"},{"product":"precision_3430_firmware","vendor":"dell"},{"product":"precision_3431_firmware","vendor":"dell"},{"product":"precision_3440_firmware","vendor":"dell"},{"product":"precision_3510_firmware","vendor":"dell"},{"product":"precision_3520_firmware","vendor":"dell"},{"product":"precision_3530_firmware","vendor":"dell"},{"product":"precision_3540_firmware","vendor":"dell"},{"product":"precision_3541_firmware","vendor":"dell"},{"product":"precision_3550_firmware","vendor":"dell"},{"product":"precision_3620_firmware","vendor":"dell"},{"product":"precision_3630_firmware","vendor":"dell"},{"product":"precision_3640_firmware","vendor":"dell"},{"product":"precision_3930_firmware","vendor":"dell"},{"product":"precision_5510_firmware","vendor":"dell"},{"product":"precision_5520_firmware","vendor":"dell"},{"product":"precision_5530_firmware","vendor":"dell"},{"product":"precision_5540_firmware","vendor":"dell"},{"product":"precision_5720_firmware","vendor":"dell"},{"product":"precision_5820_firmware","vendor":"dell"},{"product":"precision_7510_firmware","vendor":"dell"},{"product":"precision_7520_firmware","vendor":"dell"},{"product":"precision_7530_firmware","vendor":"dell"},{"product":"precision_7540_firmware","vendor":"dell"},{"product":"precision_7550_firmware","vendor":"dell"},{"product":"precision_7710_firmware","vendor":"dell"},{"product":"precision_7720_firmware","vendor":"dell"},{"product":"precision_7730_firmware","vendor":"dell"},{"product":"precision_7740_firmware","vendor":"dell"},{"product":"precision_7750_firmware","vendor":"dell"},{"product":"precision_7820_firmware","vendor":"dell"},{"product":"precision_7920_firmware","vendor":"dell"},{"product":"vostro_14_3468_firmware","vendor":"dell"},{"product":"vostro_14_3478_firmware","vendor":"dell"},{"product":"vostro_14_5468_firmware","vendor":"dell"},{"product":"vostro_15_3568_firmware","vendor":"dell"},{"product":"vostro_15_3578_firmware","vendor":"dell"},{"product":"vostro_15_5568_firmware","vendor":"dell"},{"product":"vostro_15_7570_firmware","vendor":"dell"},{"product":"vostro_15_7580_firmware","vendor":"dell"},{"product":"vostro_3070_firmware","vendor":"dell"},{"product":"vostro_3267_firmware","vendor":"dell"},{"product":"vostro_3268_firmware","vendor":"dell"},{"product":"vostro_3470_firmware","vendor":"dell"},{"product":"vostro_3471_firmware","vendor":"dell"},{"product":"vostro_3480_firmware","vendor":"dell"},{"product":"vostro_3481_firmware","vendor":"dell"},{"product":"vostro_3580_firmware","vendor":"dell"},{"product":"vostro_3581_firmware","vendor":"dell"},{"product":"vostro_3583_firmware","vendor":"dell"},{"product":"vostro_3584_firmware","vendor":"dell"},{"product":"vostro_3660_firmware","vendor":"dell"},{"product":"vostro_3667_firmware","vendor":"dell"},{"product":"vostro_3668_firmware","vendor":"dell"},{"product":"vostro_3669_firmware","vendor":"dell"},{"product":"vostro_3670_firmware","vendor":"dell"},{"product":"vostro_3671_firmware","vendor":"dell"},{"product":"vostro_3681_firmware","vendor":"dell"},{"product":"vostro_3881_firmware","vendor":"dell"},{"product":"vostro_3888_firmware","vendor":"dell"},{"product":"vostro_5090_firmware","vendor":"dell"},{"product":"vostro_5370_firmware","vendor":"dell"},{"product":"vostro_5471_firmware","vendor":"dell"},{"product":"vostro_5481_firmware","vendor":"dell"},{"product":"vostro_5581_firmware","vendor":"dell"},{"product":"vostro_5880_firmware","vendor":"dell"},{"product":"vostro_7590_firmware","vendor":"dell"},{"product":"wyse_5070_firmware","vendor":"dell"},{"product":"wyse_5470_firmware","vendor":"dell"},{"product":"wyse_7040_firmware","vendor":"dell"},{"product":"xps_13_9360_firmware","vendor":"dell"},{"product":"xps_13_9370_firmware","vendor":"dell"},{"product":"xps_13_9380_firmware","vendor":"dell"},{"product":"xps_15_7590_firmware","vendor":"dell"},{"product":"xps_15_9560_firmware","vendor":"dell"},{"product":"xps_15_9575_firmware","vendor":"dell"},{"product":"xps_27_7760_firmware","vendor":"dell"},{"product":"xps_7590_firmware","vendor":"dell"},{"product":"xps_8930_firmware","vendor":"dell"},{"product":"xps_8940_firmware","vendor":"dell"}],"cvss":{"score":7.5,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"description":"Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Code injection in CPG BIOS","id":"CVE-2021-36323","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"dell:alienware_area_51m_r2_firmware","products":["dell:alienware_area_51m_r2_firmware","dell:alienware_m15_r3_firmware","dell:alienware_m17_r3_firmware","dell:alienware_x15_r1_firmware","dell:alienware_x17_r1_firmware","dell:chengming_3980_firmware","dell:chengming_3990_firmware","dell:chengming_3991_firmware","dell:embedded_box_pc_5000_firmware","dell:g5_5000_firmware","dell:inspiron_3470_firmware","dell:inspiron_3480_firmware","dell:inspiron_3481_firmware","dell:inspiron_3580_firmware","dell:inspiron_3581_firmware","dell:inspiron_3670_firmware","dell:inspiron_3780_firmware","dell:inspiron_3781_firmware","dell:inspiron_3880_firmware","dell:inspiron_3881_firmware","dell:inspiron_5400_firmware","dell:inspiron_5401_firmware","dell:inspiron_5490_firmware","dell:inspiron_7590_firmware","dell:inspiron_7591_firmware","dell:latitude_3180_firmware","dell:latitude_3189_firmware","dell:latitude_3190_firmware","dell:latitude_3300_firmware","dell:latitude_3310_firmware","dell:latitude_3490_firmware","dell:latitude_3590_firmware","dell:latitude_5280_firmware","dell:latitude_5290_firmware","dell:latitude_5300_firmware","dell:latitude_5310_firmware","dell:latitude_5400_firmware","dell:latitude_5401_firmware","dell:latitude_5410_firmware","dell:latitude_5411_firmware","dell:latitude_5480_firmware","dell:latitude_5488_firmware","dell:latitude_5490_firmware","dell:latitude_5491_firmware","dell:latitude_5500_firmware","dell:latitude_5501_firmware","dell:latitude_5510_firmware","dell:latitude_5511_firmware","dell:latitude_5580_firmware","dell:latitude_5590_firmware","dell:latitude_5591_firmware","dell:latitude_7290_firmware","dell:latitude_7300_firmware","dell:latitude_7310_firmware","dell:latitude_7380_firmware","dell:latitude_7390_firmware","dell:latitude_7400_firmware","dell:latitude_7410_firmware","dell:latitude_7480_firmware","dell:latitude_7490_firmware","dell:latitude_9410_firmware","dell:latitude_9510_firmware","dell:optiplex_3050_firmware","dell:optiplex_3060_firmware","dell:optiplex_3070_firmware","dell:optiplex_3080_firmware","dell:optiplex_5050_firmware","dell:optiplex_5060_firmware","dell:optiplex_5070_firmware","dell:optiplex_5080_firmware","dell:optiplex_7060_firmware","dell:optiplex_7070_firmware","dell:optiplex_7071_firmware","dell:optiplex_7080_firmware","dell:optiplex_xe3_firmware","dell:precision_3440_firmware","dell:precision_3520_firmware","dell:precision_3530_firmware","dell:precision_3540_firmware","dell:precision_3541_firmware","dell:precision_3550_firmware","dell:precision_5530_firmware","dell:precision_5540_firmware","dell:precision_7520_firmware","dell:precision_7530_firmware","dell:precision_7540_firmware","dell:precision_7720_firmware","dell:precision_7730_firmware","dell:precision_7740_firmware","dell:vostro_3070_firmware","dell:vostro_3267_firmware","dell:vostro_3268_firmware","dell:vostro_3470_firmware","dell:vostro_3480_firmware","dell:vostro_3580_firmware","dell:vostro_3581_firmware","dell:vostro_3583_firmware","dell:vostro_3584_firmware","dell:vostro_3667_firmware","dell:vostro_3668_firmware","dell:vostro_3669_firmware","dell:vostro_3670_firmware","dell:vostro_3681_firmware","dell:vostro_3881_firmware","dell:vostro_3888_firmware","dell:vostro_5880_firmware","dell:vostro_7590_firmware","dell:wyse_5070_firmware","dell:wyse_5470_firmware","dell:xps_13_9380_firmware","dell:xps_15_7590_firmware","dell:xps_8940_firmware"],"type":"code_injection","year":"2021"},"n_packages":0,"n_references":1,"next":{"headline":"Code injection in CPG BIOS","id":"CVE-2021-36324"},"packages":[],"prev":{"headline":"Open redirect in Networking X-Series","id":"CVE-2021-36322"},"products":["CPG BIOS"],"published":"2021-11-12","related":[{"cvss_score":8.2,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-24415","kev_date_added":null,"published":"2022-03-11"},{"cvss_score":8.2,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-24416","kev_date_added":null,"published":"2022-03-11"},{"cvss_score":8.2,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-24419","kev_date_added":null,"published":"2022-03-11"},{"cvss_score":8.2,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-24420","kev_date_added":null,"published":"2022-03-11"},{"cvss_score":8.2,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-24421","kev_date_added":null,"published":"2022-03-11"},{"cvss_score":7.5,"headline":"Memory corruption in CPG BIOS","id":"CVE-2021-36342","kev_date_added":null,"published":"2022-01-24"},{"cvss_score":7.5,"headline":"Memory corruption in CPG BIOS","id":"CVE-2021-36343","kev_date_added":null,"published":"2022-01-24"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-10-08","vendors":["Dell"]},"summary":"A local authenticated attacker can exploit improper input validation in Dell BIOS to execute arbitrary code in SMRAM, requiring firmware updates.","url":"https://insights.sbomify.com/CVE-2021-36323/"}