Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-36285
• https://www.dell.com/support/kbdoc/000191495/