Lucene search

[email protected]CVE-2022-24420

HistoryMar 11, 2022 - 10:15 p.m.

CVE-2022-24420

2022-03-1122:15:13

CWE-119

[email protected]

web.nvd.nist.gov

dell

bios

input validation

vulnerability

smi

exploit

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Affected configurations

NVD

Node

dellalienware_13_r3_firmwareRange<1.16.1

AND

dellalienware_13_r3Match-

Node

dellalienware_15_r3_firmwareRange<1.16.1

AND

dellalienware_15_r3Match-

Node

dellalienware_15_r4_firmwareRange<1.17.0

AND

dellalienware_15_r4Match-

Node

dellalienware_17_r4_firmwareRange<1.16.1

AND

dellalienware_17_r4Match-

Node

dellalienware_17_r5_firmwareRange<1.17.0

AND

dellalienware_17_r5Match-

Node

dellalienware_area_51m_r1_firmwareRange<1.18.0

AND

dellalienware_area_51m_r1Match-

Node

dellalienware_area_51m_r2_firmwareRange<1.13.0

AND

dellalienware_area_51m_r2Match-

Node

dellalienware_aurora_r8_firmwareRange<1.0.20

AND

dellalienware_aurora_r8Match-

Node

dellalienware_m15_r2_firmwareRange<1.12.0

AND

dellalienware_m15_r2Match-

Node

dellalienware_m15_r3_firmwareRange<1.14.0

AND

dellalienware_m15_r3Match-

Node

dellalienware_m15_r4_firmwareRange<1.8.0

AND

dellalienware_m15_r4Match-

Node

dellalienware_m17_r2_firmwareRange<1.12.0

AND

dellalienware_m17_r2Match-

Node

dellalienware_m17_r3_firmwareRange<1.14.0

AND

dellalienware_m17_r3Match-

Node

dellalienware_m17_r4_firmwareRange<1.8.0

AND

dellalienware_m17_r4Match-

Node

dellalienware_x15_r1_firmwareRange<1.7.0

AND

dellalienware_x15_r1Match-

Node

dellalienware_x17_r1_firmwareRange<1.7.0

AND

dellalienware_x17_r1Match-

Node

delledge_gateway_3000_firmwareRange<1.7.0

AND

delledge_gateway_3000Match-

Node

delledge_gateway_5000_firmwareRange<1.17.0

AND

delledge_gateway_5000Match-

Node

delledge_gateway_5100_firmwareRange<1.17.0

AND

delledge_gateway_5100Match-

Node

dellembedded_box_pc_3000_firmwareRange<1.13.0

AND

dellembedded_box_pc_3000Match-

Node

dellembedded_box_pc_5000_firmwareRange<1.14.0

AND

dellembedded_box_pc_5000Match-

Node

dellinspiron_14_3473_firmwareRange<1.14.0

AND

dellinspiron_14_3473Match-

Node

dellinspiron_15_3573_firmwareRange<1.14.0

AND

dellinspiron_15_3573Match-

Node

dellinspiron_15_5566_firmwareRange<1.18.0

AND

dellinspiron_15_5566Match-

Node

dellinspiron_3277_firmwareRange<1.19.0

AND

dellinspiron_3277Match-

Node

dellinspiron_3465_firmwareRange<1.12.0

AND

dellinspiron_3465Match-

Node

dellinspiron_3477_firmwareRange<1.19.0

AND

dellinspiron_3477Match-

Node

dellinspiron_3482_firmwareRange<1.13.0

AND

dellinspiron_3482Match-

Node

dellinspiron_3502_firmwareRange<1.7.0

AND

dellinspiron_3502Match-

Node

dellinspiron_3510_firmwareRange<1.6.0

AND

dellinspiron_3510Match-

Node

dellinspiron_3565_firmwareRange<1.12.0

AND

dellinspiron_3565Match-

Node

dellinspiron_3582_firmwareRange<1.13.0

AND

dellinspiron_3582Match-

Node

dellinspiron_3782_firmwareRange<1.13.0

AND

dellinspiron_3782Match-

Node

delllatitude_3379_firmwareRange<1.0.34

AND

delllatitude_3379Match-

Node

dellvostro_14_5468_firmwareRange<1.19.0

AND

dellvostro_14_5468Match-

Node

dellvostro_15_5568_firmwareRange<1.19.0

AND

dellvostro_15_5568Match-

Node

dellvostro_3267_firmwareRange<1.20.0

AND

dellvostro_3267Match-

Node

dellvostro_3268_firmwareRange<1.20.0

AND

dellvostro_3268Match-

Node

dellvostro_3572_firmwareRange<1.14.0

AND

dellvostro_3572Match-

Node

dellvostro_3582_firmwareRange<1.13.0

AND

dellvostro_3582Match-

Node

dellvostro_3660_firmwareRange<1.20.0

AND

dellvostro_3660Match-

Node

dellvostro_3667_firmwareRange<1.20.0

AND

dellvostro_3667Match-

Node

dellvostro_3668_firmwareRange<1.20.0

AND

dellvostro_3668Match-

Node

dellvostro_3669_firmwareRange<1.20.0

AND

dellvostro_3669Match-

Node

dellwyse_7040_thin_client_firmwareRange<1.15.0

AND

dellwyse_7040_thin_clientMatch-

Node

dellxps_8930_firmwareRange<1.1.21

AND

dellxps_8930Match-

CPENameOperatorVersion
dell:alienware_13_r3_firmwaredell alienware 13 r3 firmwarelt1.16.1

CPE	Name	Operator	Version
dell:alienware_13_r3_firmware	dell alienware 13 r3 firmware	lt	1.16.1

CNA Affected

[
  {
    "product": "CPG BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.16",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-24420

cnvd1 nvd1 prion1 cvelist1 thn1