CVE-2021-36283: Dell Chengming 3990 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected products

• Dell Chengming 3990 Firmware: before 1.3.1 (fixed in 1.3.1)
• Dell Chengming 3991 Firmware: before 1.3.1 (fixed in 1.3.1)
• Dell g3 15 3500 Firmware: before 1.7.1 (fixed in 1.7.1)
• Dell g3 15 3590 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell g3 15 5500 Firmware: before 1.7.1 (fixed in 1.7.1)
• Dell Inspiron 3493 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 3501 Firmware: before 1.1.0 (fixed in 1.1.0)
• Dell Inspiron 3593 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 3793 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 3880 Firmware: before 1.3.1 (fixed in 1.3.1)
• Dell Inspiron 3881 Firmware: before 1.3.1 (fixed in 1.3.1)
• Dell Inspiron 5400 2-In-1 Firmware: before 1.5.0 (fixed in 1.5.0)
• Dell Inspiron 5490 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 5493 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 5498 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 5590 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 5593 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 5598 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell Inspiron 7391 2-In-1 Firmware: before 1.9.1 (fixed in 1.9.1)
• Dell Inspiron 7500 2-In-1 Silver Firmware: before 1.5.0 (fixed in 1.5.0)
• Dell Inspiron 7500 Firmware: before 1.5.1 (fixed in 1.5.1)
• Dell Inspiron 7501 Firmware: before 1.5.1 (fixed in 1.5.1)
• Dell Inspiron 7590 Firmware: before 1.8.0 (fixed in 1.8.0)
• Dell Inspiron 7591 Firmware: before 1.8.0 (fixed in 1.8.0)
• Dell Latitude 3310 2-In-1 Firmware: before 1.17.1 (fixed in 1.17.1)
• and 60 more

Published 2021-09-28. Last modified 2026-06-17.