CVE-2022-24421
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
- Score
- CVSS 3.1 8.2 High
- Status
- Modified - security_alert@emc.com
- Published
- 2022-03-11
- Last modified
- 2024-09-17
- Weaknesses
- CWE-119
Affected products
- Alienware 13 R3 Firmware (Dell)
- Alienware 15 R3 Firmware (Dell)
- Alienware 15 R4 Firmware (Dell)
- Alienware 17 R4 Firmware (Dell)
- Alienware 17 R5 Firmware (Dell)
- Alienware Area 51m R1 Firmware (Dell)
- Alienware Area 51m R2 Firmware (Dell)
- Alienware Aurora R8 Firmware (Dell)
- Alienware M15 R2 Firmware (Dell)
- Alienware M15 R3 Firmware (Dell)
- Alienware M15 R4 Firmware (Dell)
- Alienware M17 R2 Firmware (Dell)
- Alienware M17 R3 Firmware (Dell)
- Alienware M17 R4 Firmware (Dell)
- Alienware X15 R1 Firmware (Dell)
- Alienware X17 R1 Firmware (Dell)
- Cpg Bios (Dell)
- Edge Gateway 3000 Firmware (Dell)
- Edge Gateway 5000 Firmware (Dell)
- Edge Gateway 5100 Firmware (Dell)
- Embedded Box Pc 3000 Firmware (Dell)
- Embedded Box Pc 5000 Firmware (Dell)
- Inspiron 14 3473 Firmware (Dell)
- Inspiron 15 3573 Firmware (Dell)
- Inspiron 15 5566 Firmware (Dell)
- Inspiron 3277 Firmware (Dell)
- Inspiron 3465 Firmware (Dell)
- Inspiron 3477 Firmware (Dell)
- Inspiron 3482 Firmware (Dell)
- Inspiron 3502 Firmware (Dell)
- Inspiron 3510 Firmware (Dell)
- Inspiron 3565 Firmware (Dell)
- Inspiron 3582 Firmware (Dell)
- Inspiron 3782 Firmware (Dell)
- Latitude 3379 Firmware (Dell)
- Vostro 14 5468 Firmware (Dell)
- Vostro 15 5568 Firmware (Dell)
- Vostro 3267 Firmware (Dell)
- Vostro 3268 Firmware (Dell)
- Vostro 3572 Firmware (Dell)
- Vostro 3582 Firmware (Dell)
- Vostro 3660 Firmware (Dell)
- Vostro 3667 Firmware (Dell)
- Vostro 3668 Firmware (Dell)
- Vostro 3669 Firmware (Dell)
- Wyse 7040 Thin Client Firmware (Dell)
- Xps 8930 Firmware (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053
