Approved changes feed: RSS · Atom

cpe:2.3:o:dell:latitude_7200_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductLatitude 7200 Firmware (3f87396c-5b51-51ca-847a-b3ffda1acd29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36325 vulnerable 2026-06-08 05:32:51.328628 Details available
HIGH (7.5)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Published: 2021-11-12T22:15:23.455Z
Updated: 2024-09-16T20:31:51.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36324 vulnerable 2026-06-08 05:32:51.284237 Details available
HIGH (7.5)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Published: 2021-11-12T22:15:21.957Z
Updated: 2024-09-16T18:13:48.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36323 vulnerable 2026-06-08 05:32:51.050528 Details available
HIGH (7.5)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Published: 2021-11-12T22:15:20.406Z
Updated: 2024-09-17T02:02:47.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5324 vulnerable 2026-06-08 05:26:41.876135 Details available
HIGH (7.1)
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.
Published: 2020-02-21T14:50:13.781Z
Updated: 2024-09-17T02:16:34.647Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.