Approved changes feed: RSS · Atom

cpe:2.3:o:dell:inspiron_5406_2n1_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductInspiron 5406 2N1 Firmware (a0e1215e-8d6e-5e58-a170-5bec39c23fbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21574 vulnerable 2026-06-08 05:29:12.900193 Details available
HIGH (7.2)
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
Published: 2021-06-24T17:00:19.574Z
Updated: 2024-09-16T21:08:05.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21573 vulnerable 2026-06-08 05:29:12.891767 Details available
HIGH (7.2)
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
Published: 2021-06-24T17:00:18.090Z
Updated: 2024-09-17T01:11:41.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21572 vulnerable 2026-06-08 05:29:12.883616 Details available
HIGH (7.2)
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
Published: 2021-06-24T17:00:16.600Z
Updated: 2024-09-16T19:30:31.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21571 vulnerable 2026-06-08 05:29:12.763747 Details available
MEDIUM (5.9)
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.
Published: 2021-06-24T17:00:15.004Z
Updated: 2024-09-16T17:14:18.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.