CVE-2022-32482

published 2023-02-01

CVE-2022-32482: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this…

medium 5.1 CVSS 3.1

AV L AC L PR H UI N S U C N I H A L

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

Affected

190 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_m15_r6_firmware	< 1.17.0	1.17.0
dell	alienware_m15_r7_firmware	< 1.10.0	1.10.0
dell	chengming_3900_firmware	< 1.7.3	1.7.3
dell	cpg_bios	<= 2.15.2	—
dell	g15_5510_firmware	< 1.16.0	1.16.0
dell	g15_5511_firmware	< 1.18.0	1.18.0
dell	g15_5520_firmware	< 1.10.0	1.10.0
dell	g16_7620_firmware	< 1.12.0	1.12.0
dell	g3_3500_firmware	< 1.20.0	1.20.0
dell	g5_15_5500_firmware	< 1.20.0	1.20.0
dell	g7_15_7500_firmware	< 1.19.0	1.19.0
dell	g7_17_7700_firmware	< 1.19.0	1.19.0
dell	inspiron_14_5410_2-in-1_firmware	< 2.15.2	2.15.2
dell	inspiron_14_plus_7420_firmware	< 1.6.1	1.6.1
dell	inspiron_15_3511_firmware	< 1.18.2	1.18.2
dell	inspiron_16_plus_7620_firmware	< 1.6.1	1.6.1
dell	inspiron_3490_firmware	< 1.21.0	1.21.0
dell	inspiron_3493_firmware	< 1.24.0	1.24.0
dell	inspiron_3501_firmware	< 1.19.0	1.19.0
dell	inspiron_3511_firmware	< 1.18.2	1.18.2
dell	inspiron_3520_firmware	< 1.8.2	1.8.2
dell	inspiron_3590_firmware	< 1.21.0	1.21.0
dell	inspiron_3593_firmware	< 1.24.0	1.24.0
dell	inspiron_3790_firmware	< 1.21.0	1.21.0
dell	inspiron_3793_firmware	< 1.24.0	1.24.0

CWE-20