Skip to content
OpenAdvisories
Medium · 5.7 CVE-2021-36285 EUVD-2021-22905GHSA-26ww-2c8f-2rgh

Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrato…

Published Sep 28, 2021 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack.

Affected products

VendorProductAffectedFixed
Dell CPG BIOS unspecified – < 1.7.0 1.7.0

References