Chengming 3990 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-12	CVE-2021-36324	Improper Input Validation vulnerability in Dell products Dell BIOS contains an improper input validation vulnerability. local low complexity dell CWE-20	6.7
2021-11-12	CVE-2021-36325	Improper Input Validation vulnerability in Dell products Dell BIOS contains an improper input validation vulnerability. local low complexity dell CWE-20	6.7
2021-09-28	CVE-2021-36283	Unspecified vulnerability in Dell products Dell BIOS contains an improper input validation vulnerability. local low complexity dell	6.7
2021-06-24	CVE-2021-21571	Improper Certificate Validation vulnerability in Dell products Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. network high complexity dell CWE-295	6.5
2021-06-24	CVE-2021-21572	Out-of-bounds Write vulnerability in Dell products Dell BIOSConnect feature contains a buffer overflow vulnerability. local high complexity dell CWE-787	7.5
2021-06-24	CVE-2021-21573	Out-of-bounds Write vulnerability in Dell products Dell BIOSConnect feature contains a buffer overflow vulnerability. local high complexity dell CWE-787	7.5
2021-06-24	CVE-2021-21574	Out-of-bounds Write vulnerability in Dell products Dell BIOSConnect feature contains a buffer overflow vulnerability. local high complexity dell CWE-787	7.5
2020-06-10	CVE-2020-5362	Missing Authorization vulnerability in Dell products Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values. local low complexity dell CWE-862	4.4