Dell Inspiron 27 7775 Firmware vulnerabilities

7 known vulnerabilities affecting dell/inspiron_27_7775_firmware.

Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH5MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2022-34393HIGHCVSS 7.5fixed in 2.17.02023-01-18
CVE-2022-34393 [HIGH] CWE-20 CVE-2022-34393: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
nvd
CVE-2022-34460HIGHCVSS 7.8fixed in 2.17.02023-01-18
CVE-2022-34460 [HIGH] CWE-20 CVE-2022-34460: Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
nvd
CVE-2022-26862HIGHCVSS 7.8fixed in 2.16.12022-06-23
CVE-2022-26862 [HIGH] CWE-20 CVE-2022-26862: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated maliciou Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
nvd
CVE-2022-26863HIGHCVSS 7.8fixed in 2.16.12022-06-23
CVE-2022-26863 [HIGH] CWE-20 CVE-2022-26863: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated maliciou Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
nvd
CVE-2022-26864HIGHCVSS 7.8fixed in 2.16.12022-06-23
CVE-2022-26864 [HIGH] CWE-20 CVE-2022-26864: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated maliciou Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
nvd
CVE-2022-24417MEDIUMCVSS 6.7fixed in 2.15.02022-05-26
CVE-2022-24417 [MEDIUM] CWE-20 CVE-2022-24417: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
nvd
CVE-2022-24418MEDIUMCVSS 6.7fixed in 2.15.02022-05-26
CVE-2022-24418 [MEDIUM] CWE-20 CVE-2022-24418: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
nvd