CVE-2022-24419

CWE-119 — Buffer Overflow CWE-20 — Improper Input Validation3 documents3 sources

Severity

7.8HIGH

EPSS

0.0%

top 87.53%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dell CPG Bios Dell Alienware 13 R3 Firmware Dell Alienware 15 R3 Firmware +44 more

Timeline

PublishedMar 11

Latest updateMar 12

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 1.5 | Impact: 6.0

Affected Packages47 packages

▶CVEListV5dell/cpg_biosunspecified — 1.16

▶NVDdell/xps_8930_firmware< 1.1.21

▶NVDdell/vostro_3267_firmware< 1.20.0

▶NVDdell/vostro_3268_firmware< 1.20.0

▶NVDdell/vostro_3572_firmware< 1.14.0

🔴Vulnerability Details

GHSA

GHSA-5vqh-8cmq-gmwm: Dell BIOS contains an improper input validation vulnerability↗2022-03-12

▶

CVEList

CVE-2022-24419: Dell BIOS contains an improper input validation vulnerability↗2022-03-11

▶