Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Related CPE's

o

dell

alienware_13_r3_firmware

Vulnerable

h

dell

alienware_13_r3

-

o

dell

alienware_15_r3_firmware

Vulnerable

h

dell

alienware_15_r3

-

o

dell

alienware_15_r4_firmware

Vulnerable

h

dell

alienware_15_r4

-

o

dell

alienware_17_r4_firmware

Vulnerable

h

dell

alienware_17_r4

-

o

dell

alienware_17_r5_firmware

Vulnerable

h

dell

alienware_17_r5

-

o

dell

alienware_area_51m_r1_firmware

Vulnerable

h

dell

alienware_area_51m_r1

-

o

dell

alienware_area_51m_r2_firmware

Vulnerable

h

dell

alienware_area_51m_r2

-

o

dell

alienware_aurora_r8_firmware

Vulnerable

h

dell

alienware_aurora_r8

-

o

dell

alienware_m15_r2_firmware

Vulnerable

h

dell

alienware_m15_r2

-

o

dell

alienware_m15_r3_firmware

Vulnerable

h

dell

alienware_m15_r3

-

o

dell

alienware_m15_r4_firmware

Vulnerable

h

dell

alienware_m15_r4

-

o

dell

alienware_m17_r2_firmware

Vulnerable

h

dell

alienware_m17_r2

-

o

dell

alienware_m17_r3_firmware

Vulnerable

h

dell

alienware_m17_r3

-

o

dell

alienware_m17_r4_firmware

Vulnerable

h

dell

alienware_m17_r4

-

o

dell

alienware_x15_r1_firmware

Vulnerable

h

dell

alienware_x15_r1

-

o

dell

alienware_x17_r1_firmware

Vulnerable

h

dell

alienware_x17_r1

-

o

dell

edge_gateway_3000_firmware

Vulnerable

h

dell

edge_gateway_3000

-

o

dell

edge_gateway_5000_firmware

Vulnerable

h

dell

edge_gateway_5000

-

o

dell

edge_gateway_5100_firmware

Vulnerable

h

dell

edge_gateway_5100

-

o

dell

embedded_box_pc_3000_firmware

Vulnerable

h

dell

embedded_box_pc_3000

-

o

dell

embedded_box_pc_5000_firmware

Vulnerable

h

dell

embedded_box_pc_5000

-

o

dell

inspiron_14_3473_firmware

Vulnerable

h

dell

inspiron_14_3473

-

o

dell

inspiron_15_3573_firmware

Vulnerable

h

dell

inspiron_15_3573

-

o

dell

inspiron_15_5566_firmware

Vulnerable

h

dell

inspiron_15_5566

-

o

dell

inspiron_3277_firmware

Vulnerable

h

dell

inspiron_3277

-

o

dell

inspiron_3465_firmware

Vulnerable

h

dell

inspiron_3465

-

o

dell

inspiron_3477_firmware

Vulnerable

h

dell

inspiron_3477

-

o

dell

inspiron_3482_firmware

Vulnerable

h

dell

inspiron_3482

-

o

dell

inspiron_3502_firmware

Vulnerable

h

dell

inspiron_3502

-

o

dell

inspiron_3510_firmware

Vulnerable

h

dell

inspiron_3510

-

o

dell

inspiron_3565_firmware

Vulnerable

h

dell

inspiron_3565

-

o

dell

inspiron_3582_firmware

Vulnerable

h

dell

inspiron_3582

-

o

dell

inspiron_3782_firmware

Vulnerable

h

dell

inspiron_3782

-

o

dell

latitude_3379_firmware

Vulnerable

h

dell

latitude_3379

-

o

dell

vostro_14_5468_firmware

Vulnerable

h

dell

vostro_14_5468

-

o

dell

vostro_15_5568_firmware

Vulnerable

h

dell

vostro_15_5568

-

o

dell

vostro_3267_firmware

Vulnerable

h

dell

vostro_3267

-

o

dell

vostro_3268_firmware

Vulnerable

h

dell

vostro_3268

-

o

dell

vostro_3572_firmware

Vulnerable

h

dell

vostro_3572

-

o

dell

vostro_3582_firmware

Vulnerable

h

dell

vostro_3582

-

o

dell

vostro_3660_firmware

Vulnerable

h

dell

vostro_3660

-

o

dell

vostro_3667_firmware

Vulnerable

h

dell

vostro_3667

-

o

dell

vostro_3668_firmware

Vulnerable

h

dell

vostro_3668

-

o

dell

vostro_3669_firmware

Vulnerable

h

dell

vostro_3669

-

o

dell

wyse_7040_thin_client_firmware

Vulnerable

h

dell

wyse_7040_thin_client

-

o

dell

xps_8930_firmware

Vulnerable

h

dell

xps_8930

-

References

https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-119

[email protected]

Primary
CWE-119

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.2 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-03-11T21:15:12.747Z

3 years ago

Last modified

2024-11-21T05:50:22.707Z

1 year ago