CVE-2022-24416

CVE-2022-24416 affects Dell BIOS firmware; the vulnerability arises from improper input validation in the BIOS SMM path, allowing a local authenticated attacker to trigger an SMI and gain arbitrary code execution in SMM. Affected Dell BIOS components and models include multiple Dell lines; remedi...

CVE-2022-24420

Dell BIOS CVE-2022-24420 involves an improper input validation vulnerability that allows a local authenticated attacker to execute arbitrary code in the System Management Mode (SMM) using an SMI. Affected Dell products include several Dell BIOS-bearing systems (e.g., Inspiron, Vostro, XPS, Alienw...

CVE-2021-36343

CVE-2021-36343 affects Dell BIOS and is caused by improper input validation in the BIOS, enabling a locally authenticated attacker to use a System Management Interrupt (SMI) to gain arbitrary code execution in SMRAM. Public sources describe the vulnerability as a locally exploitable issue that ca...

CVE-2022-24419

Dell BIOS contains an improper input validation vulnerability that can be exploited locally by an authenticated attacker using an SMI to gain arbitrary code execution in System Management Mode (SMM). Affected are Dell BIOS firmware components across several systems (e.g., Inspiron, Vostro, XPS, A...

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability that allows a local authenticated attacker to trigger arbitrary code execution in System Management Mode (SMM) via an SMI. Affected Dell products include Inspiron, Vostro, XPS, Alienware, and Edge Gateway 3000 Series. The root cause is...

CVE-2022-22566

CVE-2022-22566 affects Dell Client Commercial and Consumer platforms, involving a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access could potentially exploit the flaw to execute arbitrary code on the device. CVSSv3.1 base score is 7.2 (HIGH); attack...

CVE-2022-22567

CVE-2022-22567 affects Dell Client Commercial (and Consumer) platforms and is caused by insufficient verification of data authenticity, enabling an authenticated attacker to install modified BIOS firmware. The connected records confirm the vulnerability targets Dell client platforms and involve B...

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability that can be exploited by a local authenticated attacker using an SMI to gain arbitrary code execution during System Management Mode (SMM). Several sources describe this family of flaws (CVE-2022-24415) as affecting Dell BIOS across mul...

CVE-2022-34398

Dell BIOS is affected by a Time-of-check Time-of-use (TOCTTOU) vulnerability. A local authenticated user could exploit a specifically timed DMA transaction during an SMI to gain arbitrary code execution. The documents do not provide a specific patched version or remediation details; monitor for u...

CVE-2021-36325

CVE-2021-36325 affects Dell BIOS embedded firmware. A Dell BIOS input-validation error allows a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Reported impact includes high confidentiality, integrity, and availability concerns; exploitation details are not provided...

CVE-2024-39584

Dell CVE-2024-39584 concerns the Dell Client Platform BIOS using a default cryptographic key. Multiple sources (Dell DSA-2024-354, Nessus DSA-2024-354 plugin, NVD/CVE record) describe that a high-privileged local attacker could bypass Secure Boot and execute arbitrary code due to this key weaknes...

CVE-2022-32483

CVE-2022-32483 : Dell BIOS contains an improper input validation vulnerability that allows a local, authenticated attacker with admin privileges to modify a UEFI variable. Several sources corroborate that exploitation requires access to the System Management Interface (SMI) to act within SMRAM, e...

CVE-2024-32858

CVE-2024-32858 : Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A local, high-privilege attacker could potentially exploit this to achieve code execution. The affected product is Dell Client Platform BIOS; the underlying issue i...

CVE-2024-32859

CVE-2024-32859 affects Dell Client Platform BIOS. The flaw is an Improper Input Validation in an externally developed component, enabling a locally privileged attacker with access to potentially achieve code execution. Affected software is Dell Client Platform BIOS (BIOS embedded on motherboard)....

CVE-2024-32860

CVE-2024-32860 affects Dell Client Platform BIOS. Description confirms an Improper Input Validation vulnerability in an externally developed component that could allow a highly-privileged local attacker to achieve code execution. Reported impact and conditions are consistent across sources (Dell ...

CVE-2022-32489

CVE-2022-32489 affects Dell BIOS. The vulnerability arises from improper input validation, enabling a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Impact is high (confidentiality, integrity, and availability) per multiple sources. Exploitation requires access to ...

CVE-2023-28036

Dell BIOS contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected: Dell BIOS on Dell systems. Root cause: improper input validation. Impact: potential modification of UEFI variabl...

CVE-2022-24410

CVE-2022-24410 affects Dell BIOS, where an unauthenticated local attacker with physical access could read system information via debug interfaces. The root cause is an information exposure through BIOS debug interfaces, enabling access to sensitive data. Documents consistently describe Dell BIOS ...

CVE-2022-32487

Dell BIOS contains an input validation weakness that can be triggered by a local, authenticated attacker using an SMI to execute code in SMRAM. Public sources consistently describe the vulnerability as affecting Dell BIOS embedded firmware and enabling arbitrary code execution when an SMI is used...

CVE-2022-32485

The CVE-2022-32485 entry refers to a Dell BIOS vulnerability caused by improper input validation. A local authenticated attacker could use a System Management Interrupt (SMI) to execute arbitrary code in SMRAM. Documents consistently identify Dell BIOS as the affected component and SMRAM as the t...

CVE-2022-32493

CVE-2022-32493: Dell BIOS contains a stack-based buffer overflow that can be exploited by a local, authenticated attacker using an SMI to execute code in SMRAM. This affects Dell BIOS (embedded firmware on motherboard memory) and results in arbitrary code execution with high impact on confidentia...

CVE-2024-32856

Dell CVE-2024-32856 affects Dell Client Platform BIOS with an Improper Input Validation vulnerability in an externally developed component. A high-privilege attacker with local access could potentially cause information disclosure. The available documents describe the vulnerable software as Dell ...

CVE-2021-36323

Dell BIOS contains an input validation vulnerability that can allow a local authenticated attacker to gain arbitrary code execution in SMRAM by abusing System Management Interrupts (SMI). Affected component is Dell BIOS (embedded firmware on a Dell motherboard memory chip). The root cause is impr...

CVE-2023-28050

The vulnerability CVE-2023-28050 affects Dell BIOS (embedded firmware) where improper input validation could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Root cause: faulty input validation in Dell BIOS code. Impact: potential integrity/availabilit...

CVE-2023-28034

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected component is the Dell BIOS/Uefi interface on Dell systems. Root cause: improper input validation in the BIOS that handles...

CVE-2023-28060

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28060). A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component is BIOS firmware; root cause is input validation failure. Impact is elevation/modification of...

CVE-2021-36342

CVE-2021-36342 affects Dell BIOS. A locally authenticated attacker can exploit an improper input validation via a System Management Interrupt (SMI) to achieve arbitrary code execution in SMRAM. Impact is local and persistent within the BIOS/SMRAM context; exploitation details are described as SMI...

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability (CVE-2022-32488). A local authenticated attacker could use an SMI to gain arbitrary code execution in SMRAM, with high impact on confidentiality/integrity/availability. Affected component is the BIOS firmware on Dell systems; exploitat...

CVE-2023-28058

CVE-2023-28058 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw in BIOS handling of UEFI variables. Impacts r...

CVE-2023-28031

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS (embedded firmware on Dell systems); root cause is input validation failure when handling UEFI variables. The vulnerability...

CVE-2023-25938

CVE-2023-25938 describes an improper input validation vulnerability in Dell BIOS that can allow a local, authenticated attacker with administrator privileges to modify a UEFI variable. The issue is tied to the BIOS/firmware handling of input and does not include explicit exploit details in the pr...

CVE-2022-32491

Dell Client BIOS contains a buffer overflow vulnerability that can be triggered by a locally authenticated user manipulating an SMI to cause an arbitrary write in SMRAM during SMM. Affected: Dell Client BIOS. Root cause: buffer overflow in BIOS. Impact: high confidentiality, integrity, and availa...

CVE-2023-28033

CVSS context and impact : CVE-2023-28033 affects Dell BIOS (UEFI support code) through an improper input validation vulnerability. A local authenticated user with administrator privileges can potentially exploit this to modify a UEFI variable (impact: confidentiality, integrity, availability rate...

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated user with administrator privileges to modify a UEFI variable. The issue affects Dell BIOS firmware and is described across multiple sources (e.g., Dell KB article DSA-2023-099). No exploitation de...

CVE-2021-36324

CVE-2021-36324 affects Dell BIOS. The issue is an improper input validation in Dell BIOS, enabling a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Impact is described as high (confidentiality, integrity, and availability affected) with local attack vector and high...

CVE-2022-32484

Dell BIOS firmware contains an input validation error that can be exploited by a locally authenticated administrator to modify UEFI variables. The issue is documented as CVE-2022-32484 and is supported by multiple sources (Dell KB, NCSC advisory) noting local access via an admin user and the risk...

CVE-2023-25937

Dell BIOS contains an improper input validation vulnerability that could allow a local, authenticated administrator to modify a UEFI variable. The CVE-2023-25937 entry is supported by multiple sources (NVD, CVE list, CNNVD, PRION, etc.). Reported impact includes potential changes to UEFI state wi...

CVE-2023-28059

Dell BIOS contains an improper input validation vulnerability that can allow a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (embedded BIOS on Dell motherboards). Root cause: improper input validation. Impact: potential unauthorized modification of UEF...

CVE-2023-28026

CVE-2023-28026 affects Dell BIOS and stems from improper input validation. A local authenticated attacker with administrator privileges could potentially modify a UEFI variable via this vulnerability. Documents indicate Dell released a BIOS security update addressing multiple improper input valid...

CVE-2023-28027

Dell BIOS on Dell systems contains an improper input validation vulnerability that enables a local authenticated administrator to modify a UEFI variable. The root cause is insufficient validation in the BIOS input handling, allowing manipulation of UEFI state. The impact, as stated, includes pote...

CVE-2023-28028

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28028). A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. Connected sources indicate affected firmware and that Dell issued a security update (DSA-2023-099) a...

CVE-2023-28029

CVE-2023-28029 is tied to Dell BIOS and is described as an improper input-validation vulnerability that permits a local authenticated attacker with administrator privileges to modify a UEFI variable. The affected component is Dell BIOS firmware on Dell systems; root cause centers on input validat...

CVE-2023-28044

Dell BIOS has an improper input-validation vulnerability. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable due to the fault in input validation. Affected component is Dell BIOS firmware on Dell systems; the root cause is input validation failure....

CVE-2023-28052

CVE-2023-28052 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable, impacting system integrity and availability. The affected component is Dell BIOS (UEFI/firmware) with root cause s...

CVE-2023-28042

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS firmware; root cause is input validation failure. Impact is potential compromise of UEFI variable integrity with high confi...

CVE-2023-28035

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected: Dell BIOS. Root cause: improper input validation. Impact: potential confidentiality, integrity, and limited availability effects per CVSS; local,...

CVE-2023-25936

Dell BIOS contains an improper input validation vulnerability. A local authenticated user with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; impact includes potential integrity/availability impact through UEFI variable modification. Root cause...

CVE-2023-28061

Dell BIOS is affected by an improper input validation vulnerability that allows a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (BIOS firmware on Dell systems). Root cause: improper input validation enabling unauthorized modification of UEFI variables....

CVE-2023-28030

Dell BIOS (on affected systems) contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. The issue is driven by input validation problems in the BIOS code. Impact is described as high for i...

CVE-2023-28054

CVE-2023-28054 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. The affected component is Dell BIOS firmware; root cause is input validation failure. Impact, as s...