Latitude 7370 Firmware (Dell) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-02-01. Vendor: Dell.

CVEs of Latitude 7370 Firmware

• CVE-2022-34398 - CVSS 7.5 (high), 2023-02-01: Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using…
• CVE-2022-32489 - CVSS 8.2 (high), 2022-10-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2022-32484 - CVSS 5.6 (medium), 2022-10-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this…
• CVE-2022-32488 - CVSS 8.2 (high), 2022-10-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2022-32493 - CVSS 7.8 (high), 2022-10-12: Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an…
• CVE-2022-32483 - CVSS 5.6 (medium), 2022-10-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this…
• CVE-2022-32487 - CVSS 7.8 (high), 2022-10-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2022-32491 - CVSS 7.8 (high), 2022-10-12: Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an…
• CVE-2022-32485 - CVSS 7.8 (high), 2022-10-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2022-26860 - CVSS 7.8 (high), 2022-09-06: Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI…
• CVE-2022-26859 - CVSS 7 (high), 2022-09-06: Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass…
• CVE-2022-26858 - CVSS 7.8 (high), 2022-09-06: Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by…
• CVE-2022-26861 - CVSS 7.9 (high), 2022-09-06: Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending…
• CVE-2021-36325 - CVSS 7.5 (high), 2021-11-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2021-36324 - CVSS 7.5 (high), 2021-11-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2021-36323 - CVSS 7.5 (high), 2021-11-12: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2021-36285 - CVSS 5.7 (medium), 2021-09-28: Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit…
• CVE-2021-36284 - CVSS 5.7 (medium), 2021-09-28: Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit…
• CVE-2021-21522 - CVSS 8.2 (high), 2021-09-28: Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive…
• CVE-2020-5362 - CVSS 7.1 (high), 2020-06-10: Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized…
• CVE-2020-5326 - CVSS 6.1 (medium), 2020-02-21: Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology…
• CVE-2019-3717 - CVSS 7.1 (high), 2019-08-05: Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system…