Cyber Resilience

CVE-2021-21522

High

Published: 28 September 2021

Published
28 September 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0004 13.6th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-21522 is a high-severity an unspecified weakness vulnerability in Dell Latitude 7212 Rugged Extreme Tablet Firmware. Its CVSS base score is 8.2 (High).

Operationally, ranked at the 13.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.

CWE(s)
CWE-255NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

dell
latitude 5285 2-in-1 firmware
≤ 1.13.0
dell
latitude 5289 2-in-1 firmware
≤ 1.23.1
dell
latitude 5310 2-in-1 firmware
1.7.0
dell
latitude 5290 2-in-1 firmware
≤ 1.16.0
dell
latitude 7210 2-in-1 firmware
≤ 1.7.0
dell
latitude 7212 rugged extreme tablet firmware
1.33.0 · ≤ 1.33.0
dell
latitude 7280 firmware
1.21.1 · ≤ 1.21.1
dell
latitude 7290 firmware
1.20.0 · ≤ 1.20.0
dell
latitude 7285 firmware
1.11.0 · ≤ 1.11.0
dell
latitude 7370 firmware
1.24.3 · ≤ 1.24.3
+18 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References