Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Related CPE's

o

dell

g5_se_5505_firmware

Vulnerable

h

dell

g5_se_5505

-

o

dell

inspiron_27_7775_firmware

Vulnerable

h

dell

inspiron_27_7775

-

o

dell

inspiron_3180_firmware

Vulnerable

h

dell

inspiron_3180

-

o

dell

inspiron_3185_firmware

Vulnerable

h

dell

inspiron_3185

-

o

dell

inspiron_3195_2-in-1_firmware

Vulnerable

h

dell

inspiron_3195_2-in-1

-

o

dell

inspiron_3275_firmware

Vulnerable

h

dell

inspiron_3275

-

o

dell

inspiron_3475_firmware

Vulnerable

h

dell

inspiron_3475

-

o

dell

inspiron_3505_firmware

Vulnerable

h

dell

inspiron_3505

-

o

dell

inspiron_3515_firmware

Vulnerable

h

dell

inspiron_3515

-

o

dell

inspiron_3585_firmware

Vulnerable

h

dell

inspiron_3585

-

o

dell

inspiron_3595_firmware

Vulnerable

h

dell

inspiron_3595

-

o

dell

inspiron_3785_firmware

Vulnerable

h

dell

inspiron_3785

-

o

dell

inspiron_5405_firmware

Vulnerable

h

dell

inspiron_5405

-

o

dell

inspiron_5415_firmware

Vulnerable

h

dell

inspiron_5415

-

o

dell

inspiron_5485_firmware

Vulnerable

h

dell

inspiron_5485

-

o

dell

inspiron_5485_2-in-1_firmware

Vulnerable

h

dell

inspiron_5485_2-in-1

-

o

dell

inspiron_5505_firmware

Vulnerable

h

dell

inspiron_5505

-

o

dell

inspiron_5515_firmware

Vulnerable

h

dell

inspiron_5515

-

o

dell

inspiron_5585_firmware

Vulnerable

h

dell

inspiron_5585

-

o

dell

inspiron_7375_firmware

Vulnerable

h

dell

inspiron_7375

-

o

dell

inspiron_7405_2-in-1_firmware

Vulnerable

h

dell

inspiron_7405_2-in-1

-

o

dell

inspiron_7415_firmware

Vulnerable

h

dell

inspiron_7415

-

o

dell

vostro_3405_firmware

Vulnerable

h

dell

vostro_3405

-

o

dell

vostro_3515_firmware

Vulnerable

h

dell

vostro_3515

-

o

dell

vostro_5415_firmware

Vulnerable

h

dell

vostro_5415

-

o

dell

vostro_5515_firmware

Vulnerable

h

dell

vostro_5515

-

References

https://www.dell.com/support/kbdoc/000204686

Vendor Advisory

https://www.dell.com/support/kbdoc/000204686

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-20

[email protected]

Primary
CWE-20

CVSS impact metrics

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-18T05:15:11.413Z

3 years ago

Last modified

2024-11-21T06:09:25.563Z

1 year ago