CVE-2021-21571: Dell Alienware m15 r6 Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.

Affected products

Dell Alienware m15 r6 Firmware: before 1.3.3 (fixed in 1.3.3)
Dell Chengming 3990 Firmware: before 1.4.1 (fixed in 1.4.1)
Dell Chengming 3991 Firmware: before 1.4.1 (fixed in 1.4.1)
Dell g15 5510 Firmware: before 1.4.0 (fixed in 1.4.0)
Dell g15 5511 Firmware: before 1.3.3 (fixed in 1.3.3)
Dell g3 3500 Firmware: before 1.9.0 (fixed in 1.9.0)
Dell g5 5500 Firmware: before 1.9.0 (fixed in 1.9.0)
Dell g7 7500 Firmware: before 1.9.0 (fixed in 1.9.0)
Dell g7 7700 Firmware: before 1.9.0 (fixed in 1.9.0)
Dell Inspiron 14 5418 Firmware: before 2.1.0_a06 (fixed in 2.1.0_a06)
Dell Inspiron 15 5518 Firmware: before 2.1.0_a06 (fixed in 2.1.0_a06)
Dell Inspiron 15 7510 Firmware: before 1.0.4 (fixed in 1.0.4)
Dell Inspiron 3501 Firmware: before 1.6.0 (fixed in 1.6.0)
Dell Inspiron 3880 Firmware: before 1.4.1 (fixed in 1.4.1)
Dell Inspiron 3881 Firmware: before 1.4.1 (fixed in 1.4.1)
Dell Inspiron 3891 Firmware: before 1.0.11 (fixed in 1.0.11)
Dell Inspiron 5300 Firmware: before 1.7.1 (fixed in 1.7.1)
Dell Inspiron 5301 Firmware: before 1.8.1 (fixed in 1.8.1)
Dell Inspiron 5310 Firmware: before 2.1.0 (fixed in 2.1.0)
Dell Inspiron 5400 2-In-1 Firmware: before 1.7.0 (fixed in 1.7.0)
Dell Inspiron 5400 Aio Firmware: before 1.4.0 (fixed in 1.4.0)
Dell Inspiron 5401 Aio Firmware: before 1.4.0 (fixed in 1.4.0)
Dell Inspiron 5401 Firmware: before 1.7.2 (fixed in 1.7.2)
Dell Inspiron 5402 Firmware: before 1.5.1 (fixed in 1.5.1)
Dell Inspiron 5406 2n1 Firmware: before 1.5.1 (fixed in 1.5.1)
and 103 more

Published 2021-06-24. Last modified 2026-06-17.