CVE-2024-22429

published 2024-05-17

CVE-2024-22429: Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected

60 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= N/A < 2.36.0	2.36.0
dell	cpg_bios	>= N/A < 1.18.0	1.18.0
dell	cpg_bios	>= N/A < 1.46.0	1.46.0
dell	cpg_bios	>= N/A < 1.27.0	1.27.0
dell	cpg_bios	>= N/A < 1.29.0	1.29.0
dell	cpg_bios	>= N/A < 1.28.0	1.28.0
dell	cpg_bios	>= N/A < 1.31.0	1.31.0
dell	cpg_bios	>= N/A < 1.32.0	1.32.0
dell	cpg_bios	>= N/A < 1.50.0	1.50.0
dell	cpg_bios	>= N/A < 2.30.0	2.30.0
dell	edge_gateway_3000_firmware	< 1.18.0	1.18.0
dell	edge_gateway_5000_firmware	< 1.28.0	1.28.0
dell	embedded_box_pc_3000_firmware	< 1.24.0	1.24.0
dell	embedded_box_pc_5000_firmware	< 1.25.0	1.25.0
dell	latitude_12_rugged_extreme_7214_firmware	< 1.46.0	1.46.0
dell	latitude_13_3380_firmware	< 1.27.0	1.27.0
dell	latitude_3180_firmware	< 1.29.0	1.29.0
dell	latitude_3189_firmware	< 1.29.0	1.29.0
dell	latitude_3190_2-in-1_firmware	< 1.34.0	1.34.0
dell	latitude_3190_firmware	< 1.34.0	1.34.0
dell	latitude_3300_firmware	< 1.28.0	1.28.0
dell	latitude_3390_2-in-1_firmware	< 1.31.0	1.31.0
dell	latitude_5280_firmware	< 1.36.0	1.36.0
dell	latitude_5288_firmware	< 1.36.0	1.36.0
dell	latitude_5290_2-in-1_firmware	< 1.34.0	1.34.0

CWE-20