[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256288

 
 

909

 
 

199146

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Improper certificate validation vulnerability in Dell BIOSConnect feature and Dell HTTPS Boot feature - CVE-2021-21571

ID: oval:org.secpod.oval:def:73655Date: (C)2021-07-02   (M)2023-05-14
Class: VULNERABILITYFamily: windows




Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.

Platform:
Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2008 R2
Microsoft Windows 8.1
Microsoft Windows Server 2019
Microsoft Windows Server 2012 R2
Microsoft Windows 7
Microsoft Windows Server
Microsoft Windows 11
Microsoft Windows Server 2022
Product:
Dell
Reference:
CVE-2021-21571
CVE    1
CVE-2021-21571
CPE    1
cpe:/a:dell:dell

© SecPod Technologies