CVE:CVE-2021-36284
CNNVD:CNNVD-202109-1505
DELL Dell BIOSConnect是美国戴尔（DELL）公司的一个基础平台，使 BIOS 可连接到 Dell 的 HTTP 后端，并通过 HTTP 方法加载映像。
Dell BIOS 存在安全漏洞，该漏洞源于认证机制没有暴力防护。本地管理员可以绕过过多的管理员密码尝试缓解，并执行暴力攻击。
solution:Upgrade dell latitude_5310_2-in-1_firmware to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade dell latitude_5320_firmware to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade dell latitude_5400_firmware to a higher version than 1.7.1,and avoid the version (,1.7.1); Upgrade dell latitude_5411_firmware to a higher version than 1.6.0,and avoid the version (,1.6.0); Upgrade dell latitude_5500_firmware to a higher version than 1.8.0,and avoid the version (,1.8.0); Upgrade dell latitude_5520_firmware to a higher version than 1.6.0,and avoid the version (,1.6.0); Upgrade dell latitude_5511_firmware to a higher version than 1.7.1,and avoid the version (,1.7.1); Upgrade dell latitude_7212_rugged_extreme_tablet_firmware to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade dell latitude_7280_firmware to a higher version than 1.9.1,and avoid the version (,1.9.1); Upgrade dell latitude_7320_firmware to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade dell latitude_7370_firmware to a higher version than 1.7.1,and avoid the version (,1.7.1); Upgrade dell latitude_7420_firmware to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade dell latitude_7480_firmware to a higher version than 1.7.1,and avoid the version (,1.7.1); Upgrade dell latitude_9410_firmware to a higher version than 1.7.1,and avoid the version (,1.7.1); Upgrade dell latitude_9510_firmware to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade dell latitude_9520_firmware to a higher version than 1.6.0,and avoid the version (,1.6.0); Upgrade dell optiplex_3080_firmware to a higher version than 1.5.2,and avoid the version (,1.5.2); Upgrade dell optiplex_3280_aio_firmware to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade dell optiplex_7480_aio_firmware to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade dell precision_3551_ffirmware to a higher version than 1.6.2,and avoid the version (,1.6.2); Upgrade dell precision_3640_tower_firmware to a higher version than 1.7.1,and avoid the version (,1.7.1)