CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2022-24417
Medium (6.7) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:dell_g5_5505_firmware
- dell:inspiron_22-3275_firmware
- dell:inspiron_24-3475_firmware
- dell:inspiron_27_7775_firmware
- dell:inspiron_3180_firmware
- dell:inspiron_3185_firmware
- dell:inspiron_3195_firmware
- dell:inspiron_3505_firmware
- dell:inspiron_3515_firmware
- dell:inspiron_3585_firmware
- dell:inspiron_3595_firmware
- dell:inspiron_3785_firmware
- dell:inspiron_5405_firmware
- dell:inspiron_5415_firmware
- dell:inspiron_5485_firmware
- dell:inspiron_5505_firmware
- dell:inspiron_5515_firmware
- dell:inspiron_5575_firmware
- dell:inspiron_5585_firmware
- dell:inspiron_5675_firmware
- dell:inspiron_5775_firmware
- dell:inspiron_7375_firmware
- dell:inspiron_7405_firmware
- dell:inspiron_7415_firmware
- dell:vostro_3405_firmware
- dell:vostro_3515_firmware
- dell:vostro_5415_firmware
- dell:vostro_5515_firmware