HIGH🇵🇱 Wersja polska

CVE-2022-32487

CVSS 7.5v3.1pub. 2022-10-12upd. 2024-11-21

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Dell Alienware Area 51m R1

    HW
    Dell
    all versions

  • Dell Alienware Area 51m R1 Firmware

    OS
    Dell
    < 1.21.0

  • Dell Alienware Area 51m R2

    HW
    Dell
    all versions

  • Dell Alienware Area 51m R2 Firmware

    OS
    Dell
    < 1.18.0

  • Dell Alienware Aurora R10

    HW
    Dell
    all versions

  • Dell Alienware Aurora R10 Firmware

    OS
    Dell
    < 2.3.1

  • Dell Alienware Aurora R11

    HW
    Dell
    all versions

  • Dell Alienware Aurora R11 Firmware

    OS
    Dell
    < 1.0.16

  • Dell Alienware Aurora R12

    HW
    Dell
    all versions

  • Dell Alienware Aurora R12 Firmware

    OS
    Dell
    < 1.1.16

  • Dell Alienware Aurora R13

    HW
    Dell
    all versions

  • Dell Alienware Aurora R13 Firmware

    OS
    Dell
    < 1.5.0

  • Dell Alienware Aurora R8

    HW
    Dell
    all versions

  • Dell Alienware Aurora R8 Firmware

    OS
    Dell
    < 1.0.23

  • Dell Alienware Aurora R9

    HW
    Dell
    all versions

  • Dell Alienware Aurora R9 Firmware

    OS
    Dell
    < 1.0.20

  • Dell Alienware M15 R1

    HW
    Dell
    all versions

  • Dell Alienware M15 R1 Firmware

    OS
    Dell
    < 2.14.0

  • Dell Alienware M15 R2

    HW
    Dell
    all versions

  • Dell Alienware M15 R2 Firmware

    OS
    Dell
    < 1.17.0

  • Dell Alienware M15 R3

    HW
    Dell
    all versions

  • Dell Alienware M15 R3 Firmware

    OS
    Dell
    < 1.19.0

  • Dell Alienware M15 R4

    HW
    Dell
    all versions

  • Dell Alienware M15 R4 Firmware

    OS
    Dell
    < 1.13.0

  • Dell Alienware M17 R1

    HW
    Dell
    all versions

  • Dell Alienware M17 R1 Firmware

    OS
    Dell
    < 2.14.0

  • Dell Alienware M17 R2

    HW
    Dell
    all versions

  • Dell Alienware M17 R2 Firmware

    OS
    Dell
    < 1.17.0

  • Dell Alienware M17 R3

    HW
    Dell
    all versions

  • Dell Alienware M17 R3 Firmware

    OS
    Dell
    < 1.19.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2021-21551HIGH8.8⚠ KEVsame product

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation ...

CVE-2024-47238HIGH7.5same product

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed compo...

CVE-2024-39584HIGH8.2same product

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attack...

CVE-2024-32859HIGH7.5same product

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed compo...

CVE-2024-32858HIGH7.5same product

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed compo...