CVE-2022-24416

CVE-2022-24416 affects Dell BIOS firmware; the vulnerability arises from improper input validation in the BIOS SMM path, allowing a local authenticated attacker to trigger an SMI and gain arbitrary code execution in SMM. Affected Dell BIOS components and models include multiple Dell lines; remedi...

CVE-2022-24420

Dell BIOS CVE-2022-24420 involves an improper input validation vulnerability that allows a local authenticated attacker to execute arbitrary code in the System Management Mode (SMM) using an SMI. Affected Dell products include several Dell BIOS-bearing systems (e.g., Inspiron, Vostro, XPS, Alienw...

CVE-2021-36343

CVE-2021-36343 affects Dell BIOS and is caused by improper input validation in the BIOS, enabling a locally authenticated attacker to use a System Management Interrupt (SMI) to gain arbitrary code execution in SMRAM. Public sources describe the vulnerability as a locally exploitable issue that ca...

CVE-2022-24419

Dell BIOS contains an improper input validation vulnerability that can be exploited locally by an authenticated attacker using an SMI to gain arbitrary code execution in System Management Mode (SMM). Affected are Dell BIOS firmware components across several systems (e.g., Inspiron, Vostro, XPS, A...

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability that allows a local authenticated attacker to trigger arbitrary code execution in System Management Mode (SMM) via an SMI. Affected Dell products include Inspiron, Vostro, XPS, Alienware, and Edge Gateway 3000 Series. The root cause is...

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability that can be exploited by a local authenticated attacker using an SMI to gain arbitrary code execution during System Management Mode (SMM). Several sources describe this family of flaws (CVE-2022-24415) as affecting Dell BIOS across mul...

CVE-2021-36325

CVE-2021-36325 affects Dell BIOS embedded firmware. A Dell BIOS input-validation error allows a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Reported impact includes high confidentiality, integrity, and availability concerns; exploitation details are not provided...

CVE-2022-24410

CVE-2022-24410 affects Dell BIOS, where an unauthenticated local attacker with physical access could read system information via debug interfaces. The root cause is an information exposure through BIOS debug interfaces, enabling access to sensitive data. Documents consistently describe Dell BIOS ...

CVE-2021-36323

Dell BIOS contains an input validation vulnerability that can allow a local authenticated attacker to gain arbitrary code execution in SMRAM by abusing System Management Interrupts (SMI). Affected component is Dell BIOS (embedded firmware on a Dell motherboard memory chip). The root cause is impr...

CVE-2021-36342

CVE-2021-36342 affects Dell BIOS. A locally authenticated attacker can exploit an improper input validation via a System Management Interrupt (SMI) to achieve arbitrary code execution in SMRAM. Impact is local and persistent within the BIOS/SMRAM context; exploitation details are described as SMI...

CVE-2021-36324

CVE-2021-36324 affects Dell BIOS. The issue is an improper input validation in Dell BIOS, enabling a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Impact is described as high (confidentiality, integrity, and availability affected) with local attack vector and high...