Search/CVE-2021-21571
CVE — Medium

CVE-2021-21571

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.

CVSS v3.1
5.9 MEDIUM
EPSS
0.54%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityNONE
IntegrityLOW
AvailabilityHIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jun 24, 2021
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024