HIGH🇵🇱 Wersja polska

CVE-2022-24415

CVSS 8.2v3.1pub. 2022-03-11upd. 2024-11-21

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Dell Alienware 13 R3

    HW
    Dell
    all versions

  • Dell Alienware 13 R3 Firmware

    OS
    Dell
    < 1.16.1

  • Dell Alienware 15 R3

    HW
    Dell
    all versions

  • Dell Alienware 15 R3 Firmware

    OS
    Dell
    < 1.16.1

  • Dell Alienware 15 R4

    HW
    Dell
    all versions

  • Dell Alienware 15 R4 Firmware

    OS
    Dell
    < 1.17.0

  • Dell Alienware 17 R4

    HW
    Dell
    all versions

  • Dell Alienware 17 R4 Firmware

    OS
    Dell
    < 1.16.1

  • Dell Alienware 17 R5

    HW
    Dell
    all versions

  • Dell Alienware 17 R5 Firmware

    OS
    Dell
    < 1.17.0

  • Dell Alienware Area 51m R1

    HW
    Dell
    all versions

  • Dell Alienware Area 51m R1 Firmware

    OS
    Dell
    < 1.18.0

  • Dell Alienware Area 51m R2

    HW
    Dell
    all versions

  • Dell Alienware Area 51m R2 Firmware

    OS
    Dell
    < 1.13.0

  • Dell Alienware Aurora R8

    HW
    Dell
    all versions

  • Dell Alienware Aurora R8 Firmware

    OS
    Dell
    < 1.0.20

  • Dell Alienware M15 R2

    HW
    Dell
    all versions

  • Dell Alienware M15 R2 Firmware

    OS
    Dell
    < 1.12.0

  • Dell Alienware M15 R3

    HW
    Dell
    all versions

  • Dell Alienware M15 R3 Firmware

    OS
    Dell
    < 1.14.0

  • Dell Alienware M15 R4

    HW
    Dell
    all versions

  • Dell Alienware M15 R4 Firmware

    OS
    Dell
    < 1.8.0

  • Dell Alienware M17 R2

    HW
    Dell
    all versions

  • Dell Alienware M17 R2 Firmware

    OS
    Dell
    < 1.12.0

  • Dell Alienware M17 R3

    HW
    Dell
    all versions

  • Dell Alienware M17 R3 Firmware

    OS
    Dell
    < 1.14.0

  • Dell Alienware M17 R4

    HW
    Dell
    all versions

  • Dell Alienware M17 R4 Firmware

    OS
    Dell
    < 1.8.0

  • Dell Alienware X15 R1

    HW
    Dell
    all versions

  • Dell Alienware X15 R1 Firmware

    OS
    Dell
    < 1.7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2021-21551HIGH8.8⚠ KEVsame product

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation ...

CVE-2024-47238HIGH7.5same product

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed compo...

CVE-2024-39584HIGH8.2same product

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attack...

CVE-2024-32860HIGH7.5same product

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed compo...

CVE-2024-32858HIGH7.5same product

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed compo...