CVE-2022-24417
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - security_alert@emc.com
- Published
- 2022-05-26
- Last modified
- 2024-09-16
- Weaknesses
- CWE-20
Affected products
- Cpg Bios (Dell)
- Dell G5 5505 Firmware (Dell)
- Inspiron 22-3275 Firmware (Dell)
- Inspiron 24-3475 Firmware (Dell)
- Inspiron 27 7775 Firmware (Dell)
- Inspiron 3180 Firmware (Dell)
- Inspiron 3185 Firmware (Dell)
- Inspiron 3195 Firmware (Dell)
- Inspiron 3505 Firmware (Dell)
- Inspiron 3515 Firmware (Dell)
- Inspiron 3585 Firmware (Dell)
- Inspiron 3595 Firmware (Dell)
- Inspiron 3785 Firmware (Dell)
- Inspiron 5405 Firmware (Dell)
- Inspiron 5415 Firmware (Dell)
- Inspiron 5485 Firmware (Dell)
- Inspiron 5505 Firmware (Dell)
- Inspiron 5515 Firmware (Dell)
- Inspiron 5575 Firmware (Dell)
- Inspiron 5585 Firmware (Dell)
- Inspiron 5675 Firmware (Dell)
- Inspiron 5775 Firmware (Dell)
- Inspiron 7375 Firmware (Dell)
- Inspiron 7405 Firmware (Dell)
- Inspiron 7415 Firmware (Dell)
- Vostro 3405 Firmware (Dell)
- Vostro 3515 Firmware (Dell)
- Vostro 5415 Firmware (Dell)
- Vostro 5515 Firmware (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000199285/dsa-2022-095
