CVE-2022-26862

Dell BIOS contains an Input Validation vulnerability in prior BIOS versions. A locally authenticated attacker could potentially exploit malformed input to an SMI to bypass security controls in SMM. The CVE’s connected documents corroborate Dell BIOS as the affected component and describe the issu...

CVE-2022-26864

The CVE-2022-26864 issue concerns Dell BIOS, where an input validation error in BIOS could be exploited by a locally authenticated attacker to bypass security controls in SMM by sending malicious input to an SMI. Multiple sources (NVD, CNVD, CNNVD, CVE records) describe the vulnerability as affec...

CVE-2022-26863

CVE-2022-26863 affects Dell BIOS (embedded BIOS on motherboard). The issue is an Input Validation vulnerability in Dell BIOS that can be exploited by a locally authenticated attacker who sends malicious input to an SMI to bypass security controls in SMM. Affected component: Dell BIOS firmware on ...

CVE-2022-24418

CVE-2022-24418 concerns Dell BIOS, where an input validation error in the BIOS code enables an authenticated local attacker to gain arbitrary code execution in SMM via a System Management Interrupt (SMI). The root cause is improper input validation within Dell BIOS, specifically when handling SMI...

CVE-2022-34460

CVE-2022-34460 relates to Dell BIOS prior versions containing an improper input validation vulnerability. A local authenticated attacker can potentially exploit this by using an SMI to gain arbitrary code execution in SMRAM. The problem is rooted in the BIOS, i.e., firmware on a Dell motherboard,...

CVE-2022-34400

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could exploit this to perform an arbitrary write to SMRAM during SMM. Affected software is Dell BIOS; vulnerable component is BIOS code with heap overflow. Impact: local elevation of control with poten...

CVE-2023-32475

Dell BIOS vulnerability CVE-2023-32475 stems from missing integrity check support in Dell BIOS. The issue could allow a physically proximate attacker to bypass security mechanisms and execute arbitrary code on the system. Affected software is Dell BIOS (embedded on the motherboard), with impact t...

CVE-2022-24417

The CVE-2022-24417 entry concerns Dell BIOS where an improper input validation flaw in the BIOS allows a local authenticated attacker to trigger arbitrary code execution during System Management Mode (SMM) via a Supervisory Management Interrupt (SMI). Affected component: Dell BIOS embedded on the...

CVE-2022-34393

Dell BIOS on firmware used by Dell motherboards contains an improper input validation vulnerability. The reported issue allows a local, authenticated attacker to potentially gain arbitrary code execution in SMRAM by abusing System Management Interrupts (SMIs). Root cause described as input valida...

CVE-2022-34403

Dell BIOS contains a stack-based buffer overflow vulnerability. A locally authenticated attacker can trigger it by sending larger-than-expected input via System Management Interrupt (SMI), gaining arbitrary code execution in SMRAM. Affected component is Dell BIOS (embedded software on motherboard...