Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-21571
• https://www.dell.com/support/kbdoc/en-us/000188682