Approved changes feed: RSS · Atom

cpe:2.3:h:dell:inspiron_5491:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductInspiron 5491 (c75c5e1d-56be-5068-a870-01e445342daa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36325 not_vulnerable 2026-06-08 05:32:51.318116 Details available
HIGH (7.5)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Published: 2021-11-12T22:15:23.455Z
Updated: 2024-09-16T20:31:51.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36324 not_vulnerable 2026-06-08 05:32:51.276052 Details available
HIGH (7.5)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Published: 2021-11-12T22:15:21.957Z
Updated: 2024-09-16T18:13:48.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36323 not_vulnerable 2026-06-08 05:32:50.998788 Details available
HIGH (7.5)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Published: 2021-11-12T22:15:20.406Z
Updated: 2024-09-17T02:02:47.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5324 not_vulnerable 2026-06-08 05:26:41.806353 Details available
HIGH (7.1)
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.
Published: 2020-02-21T14:50:13.781Z
Updated: 2024-09-17T02:16:34.647Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.