Latitude 7420 Firmware (Dell) - vulnerabilities (CVEs)

28 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-04-09. Vendor: Dell.

CVEs of Latitude 7420 Firmware

• CVE-2025-29988 - CVSS 6.9 (medium), 2025-04-09: Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this…
• CVE-2024-52541 - CVSS 8.2 (high), 2025-02-19: Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this…
• CVE-2023-43078 - CVSS 7.3 (high), 2024-08-28: Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion,…
• CVE-2024-0158 - CVSS 6.7 (medium), 2024-07-02: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this…
• CVE-2024-22448 - CVSS 4.7 (medium), 2024-04-10: Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this…
• CVE-2023-48674 - CVSS 6.8 (medium), 2024-03-01: Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send…
• CVE-2023-28063 - CVSS 6.7 (medium), 2024-02-06: Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit…
• CVE-2023-28075 - CVSS 6.9 (medium), 2023-08-16: Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially…
• CVE-2023-32453 - CVSS 4.6 (medium), 2023-08-16: Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in…
• CVE-2022-46752 - CVSS 4.6 (medium), 2023-03-08: Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial…
• CVE-2022-32482 - CVSS 5.6 (medium), 2023-02-01: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this…
• CVE-2022-34403 - CVSS 8.8 (high), 2023-02-01: Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to…
• CVE-2022-34400 - CVSS 7.1 (high), 2023-02-01: Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an…
• CVE-2022-26860 - CVSS 7.8 (high), 2022-09-06: Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI…
• CVE-2022-26859 - CVSS 7 (high), 2022-09-06: Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass…
• CVE-2022-26858 - CVSS 7.8 (high), 2022-09-06: Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by…
• CVE-2022-26861 - CVSS 7.9 (high), 2022-09-06: Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending…
• CVE-2022-22567 - CVSS 5.1 (medium), 2022-02-09: Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated…
• CVE-2022-22566 - CVSS 7.2 (high), 2022-02-09: Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical…
• CVE-2021-36343 - CVSS 7.5 (high), 2022-01-24: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2021-36342 - CVSS 7.5 (high), 2022-01-24: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI…
• CVE-2021-36285 - CVSS 5.7 (medium), 2021-09-28: Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit…
• CVE-2021-36284 - CVSS 5.7 (medium), 2021-09-28: Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit…
• CVE-2021-21522 - CVSS 8.2 (high), 2021-09-28: Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive…
• CVE-2021-21574 - CVSS 7.5 (high), 2021-06-24: Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially…
• CVE-2021-21571 - CVSS 6.5 (medium), 2021-06-24: Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A…
• CVE-2021-21573 - CVSS 7.5 (high), 2021-06-24: Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially…
• CVE-2021-21572 - CVSS 7.5 (high), 2021-06-24: Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially…