Skip to content
OpenAdvisories
Medium · 5.9 CVE-2021-21571 EUVD-2021-8843GHSA-g784-x97g-r6ww

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validatio…

Published Jun 24, 2021 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.

Affected products

VendorProductAffectedFixed
Dell UEFI BIOS https stack Gen 11, Gen 10 —

References