CVE-2021-36284CWE-307
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability
Medium · published September 28, 2021
What it is
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack.
The record
Technical detail
- CVSS v3.1
- 5.7 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00232 · 13.3th percentile
- Weakness
- CWE-307 · Improper Restriction of Excessive Authentication Attempts
- Published
- 2021-09-28T19:20Z
EPSS history
Timeline