CVEvulnerability

CVE-2022-24421

7.8 HIGH Published 2022-03-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Affected configurations

• dell alienware 13 r3 firmware (< 1.16.1) • dell alienware 15 r3 firmware (< 1.16.1) • dell alienware 15 r4 firmware (< 1.17.0) • dell alienware 17 r4 firmware (< 1.16.1) • dell alienware 17 r5 firmware (< 1.17.0) • dell alienware area 51m r1 firmware (< 1.18.0) • dell alienware area 51m r2 firmware (< 1.13.0) • dell alienware aurora r8 firmware (< 1.0.20) • dell alienware m15 r2 firmware (< 1.12.0) • dell alienware m15 r3 firmware (< 1.14.0) • dell alienware m15 r4 firmware (< 1.8.0) • dell alienware m17 r2 firmware (< 1.12.0) • dell alienware m17 r3 firmware (< 1.14.0) • dell alienware m17 r4 firmware (< 1.8.0) • dell alienware x15 r1 firmware (< 1.7.0) • dell alienware x17 r1 firmware (< 1.7.0) • dell edge gateway 3000 firmware (< 1.7.0) • dell edge gateway 5000 firmware (< 1.17.0) • dell edge gateway 5100 firmware (< 1.17.0) • dell embedded box pc 3000 firmware (< 1.13.0) • dell embedded box pc 5000 firmware (< 1.14.0) • dell inspiron 14 3473 firmware (< 1.14.0) • dell inspiron 15 3573 firmware (< 1.14.0) • dell inspiron 15 5566 firmware (< 1.18.0) • dell inspiron 3277 firmware (< 1.19.0) • dell inspiron 3465 firmware (< 1.12.0) • dell inspiron 3477 firmware (< 1.19.0) • dell inspiron 3482 firmware (< 1.13.0) • dell inspiron 3502 firmware (< 1.7.0) • dell inspiron 3510 firmware (< 1.6.0) • dell inspiron 3565 firmware (< 1.12.0) • dell inspiron 3582 firmware (< 1.13.0) • dell inspiron 3782 firmware (< 1.13.0) • dell latitude 3379 firmware (< 1.0.34) • dell vostro 14 5468 firmware (< 1.19.0) • dell vostro 15 5568 firmware (< 1.19.0) • dell vostro 3267 firmware (< 1.20.0) • dell vostro 3268 firmware (< 1.20.0) • dell vostro 3572 firmware (< 1.14.0) • dell vostro 3582 firmware (< 1.13.0) • dell vostro 3660 firmware (< 1.20.0) • dell vostro 3667 firmware (< 1.20.0) • dell vostro 3668 firmware (< 1.20.0) • dell vostro 3669 firmware (< 1.20.0) • dell wyse 7040 thin client firmware (< 1.15.0) • dell xps 8930 firmware (< 1.1.21)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References