Lucene search

K

Inspiron 3668 Firmware Security Vulnerabilities

cve
cve

CVE-2019-3717

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system duri...

6.8CVSS

6.6AI Score

0.001EPSS

2019-08-05 05:15 PM
37
cve
cve

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup conf...

7.1CVSS

4.8AI Score

0.0004EPSS

2020-06-10 09:15 PM
56
cve
cve

CVE-2021-36323

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

7.5CVSS

6.8AI Score

0.0004EPSS

2021-11-12 11:15 PM
22
cve
cve

CVE-2021-36324

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

7.5CVSS

6.8AI Score

0.0004EPSS

2021-11-12 11:15 PM
21
cve
cve

CVE-2021-36325

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

7.5CVSS

6.9AI Score

0.0004EPSS

2021-11-12 11:15 PM
43
cve
cve

CVE-2021-36342

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

7.5CVSS

6.8AI Score

0.0004EPSS

2022-01-24 08:15 PM
35
cve
cve

CVE-2021-36343

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

7.5CVSS

6.8AI Score

0.0004EPSS

2022-01-24 08:15 PM
76
cve
cve

CVE-2022-24410

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.

6.8CVSS

4.2AI Score

0.001EPSS

2023-02-10 11:15 AM
18