CVE Feed

    Dashboard / CVE / CVE-2022-24420

    CVE-2022-24420

    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

    Published:Mar 11, 2022
    Last Modified:Nov 21, 2024
    EPS:Mar 11, 2022
    EPSS Score:0.00041
    CVSS Score:8.2

    Affected Products

    Vendor
    Dell
    Product
    Alienware 13 R3
    Vendor
    Dell
    Product
    Alienware 13 R3 Firmware
    Vendor
    Dell
    Product
    Alienware 15 R3
    Vendor
    Dell
    Product
    Alienware 15 R3 Firmware
    Vendor
    Dell
    Product
    Alienware 15 R4
    Vendor
    Dell
    Product
    Alienware 15 R4 Firmware
    Vendor
    Dell
    Product
    Alienware 17 R4
    Vendor
    Dell
    Product
    Alienware 17 R4 Firmware
    Vendor
    Dell
    Product
    Alienware 17 R5
    Vendor
    Dell
    Product
    Alienware 17 R5 Firmware
    Vendor
    Dell
    Product
    Alienware Area 51m R1
    Vendor
    Dell
    Product
    Alienware Area 51m R1 Firmware
    Vendor
    Dell
    Product
    Alienware Area 51m R2
    Vendor
    Dell
    Product
    Alienware Area 51m R2 Firmware
    Vendor
    Dell
    Product
    Alienware Aurora R8
    Vendor
    Dell
    Product
    Alienware Aurora R8 Firmware
    Vendor
    Dell
    Product
    Alienware M15 R2
    Vendor
    Dell
    Product
    Alienware M15 R2 Firmware
    Vendor
    Dell
    Product
    Alienware M15 R3
    Vendor
    Dell
    Product
    Alienware M15 R3 Firmware
    Vendor
    Dell
    Product
    Alienware M15 R4
    Vendor
    Dell
    Product
    Alienware M15 R4 Firmware
    Vendor
    Dell
    Product
    Alienware M17 R2
    Vendor
    Dell
    Product
    Alienware M17 R2 Firmware
    Vendor
    Dell
    Product
    Alienware M17 R3
    Vendor
    Dell
    Product
    Alienware M17 R3 Firmware
    Vendor
    Dell
    Product
    Alienware M17 R4
    Vendor
    Dell
    Product
    Alienware M17 R4 Firmware
    Vendor
    Dell
    Product
    Alienware X15 R1
    Vendor
    Dell
    Product
    Alienware X15 R1 Firmware
    Vendor
    Dell
    Product
    Alienware X17 R1
    Vendor
    Dell
    Product
    Alienware X17 R1 Firmware
    Vendor
    Dell
    Product
    Edge Gateway 3000
    Vendor
    Dell
    Product
    Edge Gateway 3000 Firmware
    Vendor
    Dell
    Product
    Edge Gateway 5000
    Vendor
    Dell
    Product
    Edge Gateway 5000 Firmware
    Vendor
    Dell
    Product
    Edge Gateway 5100
    Vendor
    Dell
    Product
    Edge Gateway 5100 Firmware
    Vendor
    Dell
    Product
    Embedded Box Pc 3000
    Vendor
    Dell
    Product
    Embedded Box Pc 3000 Firmware
    Vendor
    Dell
    Product
    Embedded Box Pc 5000
    Vendor
    Dell
    Product
    Embedded Box Pc 5000 Firmware
    Vendor
    Dell
    Product
    Inspiron 14 3473
    Vendor
    Dell
    Product
    Inspiron 14 3473 Firmware
    Vendor
    Dell
    Product
    Inspiron 15 3573
    Vendor
    Dell
    Product
    Inspiron 15 3573 Firmware
    Vendor
    Dell
    Product
    Inspiron 15 5566
    Vendor
    Dell
    Product
    Inspiron 15 5566 Firmware
    Vendor
    Dell
    Product
    Inspiron 3277
    Vendor
    Dell
    Product
    Inspiron 3277 Firmware
    Vendor
    Dell
    Product
    Inspiron 3465
    Vendor
    Dell
    Product
    Inspiron 3465 Firmware
    Vendor
    Dell
    Product
    Inspiron 3477
    Vendor
    Dell
    Product
    Inspiron 3477 Firmware
    Vendor
    Dell
    Product
    Inspiron 3482
    Vendor
    Dell
    Product
    Inspiron 3482 Firmware
    Vendor
    Dell
    Product
    Inspiron 3502
    Vendor
    Dell
    Product
    Inspiron 3502 Firmware
    Vendor
    Dell
    Product
    Inspiron 3510
    Vendor
    Dell
    Product
    Inspiron 3510 Firmware
    Vendor
    Dell
    Product
    Inspiron 3565
    Vendor
    Dell
    Product
    Inspiron 3565 Firmware
    Vendor
    Dell
    Product
    Inspiron 3582
    Vendor
    Dell
    Product
    Inspiron 3582 Firmware
    Vendor
    Dell
    Product
    Inspiron 3782
    Vendor
    Dell
    Product
    Inspiron 3782 Firmware
    Vendor
    Dell
    Product
    Latitude 3379
    Vendor
    Dell
    Product
    Latitude 3379 Firmware
    Vendor
    Dell
    Product
    Vostro 14 5468
    Vendor
    Dell
    Product
    Vostro 14 5468 Firmware
    Vendor
    Dell
    Product
    Vostro 15 5568
    Vendor
    Dell
    Product
    Vostro 15 5568 Firmware
    Vendor
    Dell
    Product
    Vostro 3267
    Vendor
    Dell
    Product
    Vostro 3267 Firmware
    Vendor
    Dell
    Product
    Vostro 3268
    Vendor
    Dell
    Product
    Vostro 3268 Firmware
    Vendor
    Dell
    Product
    Vostro 3572
    Vendor
    Dell
    Product
    Vostro 3572 Firmware
    Vendor
    Dell
    Product
    Vostro 3582
    Vendor
    Dell
    Product
    Vostro 3582 Firmware
    Vendor
    Dell
    Product
    Vostro 3660
    Vendor
    Dell
    Product
    Vostro 3660 Firmware
    Vendor
    Dell
    Product
    Vostro 3667
    Vendor
    Dell
    Product
    Vostro 3667 Firmware
    Vendor
    Dell
    Product
    Vostro 3668
    Vendor
    Dell
    Product
    Vostro 3668 Firmware
    Vendor
    Dell
    Product
    Vostro 3669
    Vendor
    Dell
    Product
    Vostro 3669 Firmware
    Vendor
    Dell
    Product
    Wyse 7040 Thin Client
    Vendor
    Dell
    Product
    Wyse 7040 Thin Client Firmware
    Vendor
    Dell
    Product
    Xps 8930
    Vendor
    Dell
    Product
    Xps 8930 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-24410 (CVSS 6.8) — Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical acc…
    CVE-2022-24421 (CVSS 8.2) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2022-24419 (CVSS 8.2) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2022-24416 (CVSS 8.2) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2022-24415 (CVSS 8.2) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36343 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36342 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36325 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36324 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36323 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High