CVE-2024-52541

CVE-2024-52541 affects Dell Client Platform BIOS. The vulnerability is a weak authentication flaw that could allow a high-privilege attacker with local access to achieve Elevation of Privileges. The connected sources confirm the issue but do not provide public exploit details or concrete remediat...

CVE-2023-28063

CVE-2023-28063 affects Dell BIOS. Root cause: a signed-to-unsigned conversion error. Local authenticated admin can exploit to cause a denial of service. Dell-DSA-2023-176 and Dell KB 000214780 document the fix; Nessus plugin notes a patch is available. If exploited, impact is DoS on the affected ...

CVE-2025-29988

CVE-2025-29988 affects Dell Client Platform BIOS. Detailed sources describe a Stack-based Buffer Overflow vulnerability in the BIOS, exploitable by a high-privilege local attacker to achieve arbitrary code execution. The root cause is an input handling/application boundary error, with confirmatio...

CVE-2023-48674

CVE-2023-48674 affects Dell Platform BIOS. Described as an improper NULL termination vulnerability that could allow a high-privilege user with network access to send malicious data to the device, potentially causing some services to cease functioning (DoS). Documented impact includes availability...

CVE-2022-32482

CVE-2022-32482 : Dell BIOS contains an improper input validation vulnerability that allows a local authenticated attacker with admin privileges to potentially modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw. Exploitation details are not provided in the ava...

CVE-2022-46752

Dell BIOS contains an improper authorization vulnerability. An unauthenticated physical attacker may cause a denial of service. Affected: Dell BIOS (firmware); root cause is improper authorization management. Impact: availability loss (CVSS v3.1: AV=P/AC=L/PR=N/UI=N/S=U/C=N/I=N/A=H; base score 4....

CVE-2023-28064

Dell BIOS contains an out-of-bounds write vulnerability that may be exploited by an unauthenticated, physical attacker to cause a denial of service. Affected: Dell BIOS on Dell systems. Root cause: out-of-bounds write in BIOS code. Impact: denial of service (no confidentiality/integrity impact st...

CVE-2022-31222

Summary: CVE-2022-31222 concerns Dell BIOS on motherboard firmware, described as a Missing Release of Resource after Effective Lifetime vulnerability. The root cause is a failure to release resources after their intended lifecycle, enabling a local, authenticated administrator to exhaust memory a...

CVE-2024-22448

CVE-2024-22448 concerns Dell BIOS: an Out-of-Bounds Write vulnerability in Dell BIOS, exploitable by a local, authenticated attacker with admin privileges, causing denial of service. Affected software/tooling is the Dell BIOS on Dell systems; the root cause is an out-of-bounds write in the BIOS c...

CVE-2022-31220

Dell BIOS contains an Unchecked Return Value vulnerability exploitable by a local authenticated administrator to change system state or cause unexpected failures. Affected product is Dell BIOS (embedded BIOS on Dell motherboards); root cause is unchecked return value. Exploitation details are not...

CVE-2023-28036

Dell BIOS contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected: Dell BIOS on Dell systems. Root cause: improper input validation. Impact: potential modification of UEFI variabl...

CVE-2022-31226

CVE-2022-31226 affects Dell BIOS, describing a stack-based buffer overflow in Dell BIOS firmware. The vulnerability is triggered by a boundary/overrun condition when handling untrusted input, permitting a local authenticated user to send excess data to a function and potentially achieve arbitrary...

CVE-2022-31221

Dell BIOS is the affected product. The CVE-2022-31221 entry describes an information disclosure vulnerability in Dell BIOS, exploitable by a locally authenticated administrator to access sensitive state information on the system. The connected documents corroborate that the affected component is ...

CVE-2023-28050

The vulnerability CVE-2023-28050 affects Dell BIOS (embedded firmware) where improper input validation could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Root cause: faulty input validation in Dell BIOS code. Impact: potential integrity/availabilit...

CVE-2024-0158

CVE-2024-0158 relates to Dell BIOS, where an improper input validation flaw could let a locally authenticated administrator modify a UEFI variable, causing denial of service and privilege escalation. Affected software is the Dell BIOS (details on exact versions are not consistently specified acro...

CVE-2022-31223

CVE-2022-31223 concerns Dell BIOS, described as an input validation issue in the BIOS embedded software on Dell motherboards. The vulnerability is an improper neutralization of null bytes, which could allow a locally authenticated administrator to read memory by sending unexpected null bytes. Doc...

CVE-2023-28060

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28060). A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component is BIOS firmware; root cause is input validation failure. Impact is elevation/modification of...

CVE-2022-31225

CVE-2022-31225 affects Dell BIOS versions and is caused by an unchecked return value. A local authenticated administrator could exploit this to change the system state or cause unexpected failures. Public details in the provided documents describe Dell BIOS as embedded software on a motherboard, ...

CVE-2023-28034

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected component is the Dell BIOS/Uefi interface on Dell systems. Root cause: improper input validation in the BIOS that handles...

CVE-2023-28058

CVE-2023-28058 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw in BIOS handling of UEFI variables. Impacts r...

CVE-2023-25938

CVE-2023-25938 describes an improper input validation vulnerability in Dell BIOS that can allow a local, authenticated attacker with administrator privileges to modify a UEFI variable. The issue is tied to the BIOS/firmware handling of input and does not include explicit exploit details in the pr...

CVE-2023-28031

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS (embedded firmware on Dell systems); root cause is input validation failure when handling UEFI variables. The vulnerability...

CVE-2022-31224

Dell BIOS firmware is affected by an Improper Protection Against Voltage and Clock Glitches vulnerability. A physically present attacker could trigger a fault condition to alter system behavior. The available sources identify the issue in Dell BIOS versions but do not specify affected version ran...

CVE-2023-28033

CVSS context and impact : CVE-2023-28033 affects Dell BIOS (UEFI support code) through an improper input validation vulnerability. A local authenticated user with administrator privileges can potentially exploit this to modify a UEFI variable (impact: confidentiality, integrity, availability rate...

CVE-2023-28027

Dell BIOS on Dell systems contains an improper input validation vulnerability that enables a local authenticated administrator to modify a UEFI variable. The root cause is insufficient validation in the BIOS input handling, allowing manipulation of UEFI state. The impact, as stated, includes pote...

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated user with administrator privileges to modify a UEFI variable. The issue affects Dell BIOS firmware and is described across multiple sources (e.g., Dell KB article DSA-2023-099). No exploitation de...

CVE-2023-25937

Dell BIOS contains an improper input validation vulnerability that could allow a local, authenticated administrator to modify a UEFI variable. The CVE-2023-25937 entry is supported by multiple sources (NVD, CVE list, CNNVD, PRION, etc.). Reported impact includes potential changes to UEFI state wi...

CVE-2023-28028

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28028). A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. Connected sources indicate affected firmware and that Dell issued a security update (DSA-2023-099) a...

CVE-2023-43078

Dell Dock Firmware and Dell Client Platform are affected by CVE-2023-43078 due to an Improper Link Resolution vulnerability during installation, which can lead to arbitrary folder deletion and potential Privilege Escalation or Denial of Service. Affected components include the Dell Dock Firmware ...

CVE-2023-28026

CVE-2023-28026 affects Dell BIOS and stems from improper input validation. A local authenticated attacker with administrator privileges could potentially modify a UEFI variable via this vulnerability. Documents indicate Dell released a BIOS security update addressing multiple improper input valid...

CVE-2023-28042

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS firmware; root cause is input validation failure. Impact is potential compromise of UEFI variable integrity with high confi...

CVE-2023-28059

Dell BIOS contains an improper input validation vulnerability that can allow a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (embedded BIOS on Dell motherboards). Root cause: improper input validation. Impact: potential unauthorized modification of UEF...

CVE-2023-28029

CVE-2023-28029 is tied to Dell BIOS and is described as an improper input-validation vulnerability that permits a local authenticated attacker with administrator privileges to modify a UEFI variable. The affected component is Dell BIOS firmware on Dell systems; root cause centers on input validat...

CVE-2023-28044

Dell BIOS has an improper input-validation vulnerability. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable due to the fault in input validation. Affected component is Dell BIOS firmware on Dell systems; the root cause is input validation failure....

CVE-2023-28052

CVE-2023-28052 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable, impacting system integrity and availability. The affected component is Dell BIOS (UEFI/firmware) with root cause s...

CVE-2023-32480

Summary: CVE-2023-32480 affects Dell BIOS. The issue is an improper input validation in Dell BIOS firmware (embedded on the motherboard). The vulnerability could allow an unauthenticated physical attacker to perform arbitrary code execution with high impact to confidentiality, integrity, and avai...

CVE-2023-28035

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected: Dell BIOS. Root cause: improper input validation. Impact: potential confidentiality, integrity, and limited availability effects per CVSS; local,...

CVE-2023-25936

Dell BIOS contains an improper input validation vulnerability. A local authenticated user with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; impact includes potential integrity/availability impact through UEFI variable modification. Root cause...

CVE-2023-28061

Dell BIOS is affected by an improper input validation vulnerability that allows a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (BIOS firmware on Dell systems). Root cause: improper input validation enabling unauthorized modification of UEFI variables....

CVE-2023-28041

CVE-2023-28041 concerns Dell BIOS, where an improper input validation weakness could be abused by a local authenticated administrator to modify a UEFI variable. The vulnerability affects the BIOS and could impact confidentiality, integrity, and availability. Exploitation status is not detailed in...

CVE-2023-28056

Dell BIOS exposes an improper input validation vulnerability that can be exploited by a local authenticated administrator to modify a UEFI variable. The issue is documented across multiple sources (e.g., Dell security advisory for BIOS updates addressing improper input validation). Affected compo...

CVE-2023-28030

Dell BIOS (on affected systems) contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. The issue is driven by input validation problems in the BIOS code. Impact is described as high for i...

CVE-2023-28054

CVE-2023-28054 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. The affected component is Dell BIOS firmware; root cause is input validation failure. Impact, as s...

CVE-2023-28040

CVE-2023-28040 affects Dell BIOS and describes an improper input validation vulnerability in the BIOS firmware that could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. The root cause is input validation failure when handling UEFI variable actions. I...

CVE-2023-28032

CVE-2023-28032 concerns Dell BIOS with an improper input validation vulnerability. The issue allows a local, authenticated attacker with administrator privileges to potentially modify a UEFI variable by abusing input handling in the BIOS firmware. Affected component is Dell BIOS; the root cause i...