CVE-2022-22567

CVE-2022-22567 affects Dell Client Commercial (and Consumer) platforms and is caused by insufficient verification of data authenticity, enabling an authenticated attacker to install modified BIOS firmware. The connected records confirm the vulnerability targets Dell client platforms and involve B...

CVE-2021-36343

CVE-2021-36343 affects Dell BIOS and is caused by improper input validation in the BIOS, enabling a locally authenticated attacker to use a System Management Interrupt (SMI) to gain arbitrary code execution in SMRAM. Public sources describe the vulnerability as a locally exploitable issue that ca...

CVE-2022-22566

CVE-2022-22566 affects Dell Client Commercial and Consumer platforms, involving a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access could potentially exploit the flaw to execute arbitrary code on the device. CVSSv3.1 base score is 7.2 (HIGH); attack...

CVE-2022-26858

Dell BIOS CVE-2022-26858 is an Improper Authentication vulnerability affecting Dell BIOS versions. A locally authenticated user can potentially bypass security controls by sending malicious input to an SMI. The issue is commonly discussed alongside related BIOS vulnerabilities (DSA-2022-224) and ...

CVE-2020-5362

CVE-2020-5362 affects Dell Client Client Consumer and Commercial platforms, where an improper authorization in the Dell Manageability interface allows an attacker with local OS administrator privileges to bypass BIOS Administrator authentication and restore BIOS Setup to default values. The NVD e...

CVE-2022-32482

CVE-2022-32482 : Dell BIOS contains an improper input validation vulnerability that allows a local authenticated attacker with admin privileges to potentially modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw. Exploitation details are not provided in the ava...

CVE-2020-5324

CVE-2020-5324 describes an Arbitrary File Overwrite vulnerability in the Dell Firmware Update Utility. During the execution window by an administrator, a locally authenticated, low-privileged user could exploit a symlink attack to overwrite arbitrary files, though the vulnerability does not affec...

CVE-2022-32483

CVE-2022-32483 : Dell BIOS contains an improper input validation vulnerability that allows a local, authenticated attacker with admin privileges to modify a UEFI variable. Several sources corroborate that exploitation requires access to the System Management Interface (SMI) to act within SMRAM, e...

CVE-2022-32489

CVE-2022-32489 affects Dell BIOS. The vulnerability arises from improper input validation, enabling a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Impact is high (confidentiality, integrity, and availability) per multiple sources. Exploitation requires access to ...

CVE-2022-26859

CVE-2022-26859 describes a race condition in Dell BIOS that can be triggered by a local attacker sending malicious input via System Management Interrupt (SMI) to bypass security checks during System Management Mode (SMM). The vulnerability affects Dell BIOS and enables potential interception or c...

CVE-2022-32487

Dell BIOS contains an input validation weakness that can be triggered by a local, authenticated attacker using an SMI to execute code in SMRAM. Public sources consistently describe the vulnerability as affecting Dell BIOS embedded firmware and enabling arbitrary code execution when an SMI is used...

CVE-2022-32485

The CVE-2022-32485 entry refers to a Dell BIOS vulnerability caused by improper input validation. A local authenticated attacker could use a System Management Interrupt (SMI) to execute arbitrary code in SMRAM. Documents consistently identify Dell BIOS as the affected component and SMRAM as the t...

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability (CVE-2022-32488). A local authenticated attacker could use an SMI to gain arbitrary code execution in SMRAM, with high impact on confidentiality/integrity/availability. Affected component is the BIOS firmware on Dell systems; exploitat...

CVE-2022-24410

CVE-2022-24410 affects Dell BIOS, where an unauthenticated local attacker with physical access could read system information via debug interfaces. The root cause is an information exposure through BIOS debug interfaces, enabling access to sensitive data. Documents consistently describe Dell BIOS ...

CVE-2022-32493

CVE-2022-32493: Dell BIOS contains a stack-based buffer overflow that can be exploited by a local, authenticated attacker using an SMI to execute code in SMRAM. This affects Dell BIOS (embedded firmware on motherboard memory) and results in arbitrary code execution with high impact on confidentia...

CVE-2021-36342

CVE-2021-36342 affects Dell BIOS. A locally authenticated attacker can exploit an improper input validation via a System Management Interrupt (SMI) to achieve arbitrary code execution in SMRAM. Impact is local and persistent within the BIOS/SMRAM context; exploitation details are described as SMI...

CVE-2022-26860

CVE-2022-26860 describes a stack-based buffer overflow in Dell BIOS. A local attacker can trigger it via System Management Interrupt (SMI), bypass security checks, and achieve arbitrary code execution in System Management Mode (SMM). Affected: Dell BIOS versions; vulnerability is local with low a...

CVE-2022-26861

Dell BIOS firmware contains an Insecure Automated Optimization vulnerability (CVE-2022-26861) that allows a locally authenticated attacker to trigger arbitrary code execution during System Management Mode (SMM) by sending malicious input via SMI. The issue is tied to the BIOS/SMM trust boundary, ...

CVE-2022-32491

Dell Client BIOS contains a buffer overflow vulnerability that can be triggered by a locally authenticated user manipulating an SMI to cause an arbitrary write in SMRAM during SMM. Affected: Dell Client BIOS. Root cause: buffer overflow in BIOS. Impact: high confidentiality, integrity, and availa...

CVE-2022-32484

Dell BIOS firmware contains an input validation error that can be exploited by a locally authenticated administrator to modify UEFI variables. The issue is documented as CVE-2022-32484 and is supported by multiple sources (Dell KB, NCSC advisory) noting local access via an admin user and the risk...