CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2022-24421
High (7.8) in dell. EPSS 0.3% chance of exploitation in the next 30 days.
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:alienware_13_r3_firmware
- dell:alienware_15_r3_firmware
- dell:alienware_15_r4_firmware
- dell:alienware_17_r4_firmware
- dell:alienware_17_r5_firmware
- dell:alienware_area_51m_r1_firmware
- dell:alienware_area_51m_r2_firmware
- dell:alienware_aurora_r8_firmware
- dell:alienware_m15_r2_firmware
- dell:alienware_m15_r3_firmware
- dell:alienware_m15_r4_firmware
- dell:alienware_m17_r2_firmware
- dell:alienware_m17_r3_firmware
- dell:alienware_m17_r4_firmware
- dell:alienware_x15_r1_firmware
- dell:alienware_x17_r1_firmware
- dell:edge_gateway_3000_firmware
- dell:edge_gateway_5000_firmware
- dell:edge_gateway_5100_firmware
- dell:embedded_box_pc_3000_firmware
- dell:embedded_box_pc_5000_firmware
- dell:inspiron_14_3473_firmware
- dell:inspiron_15_3573_firmware
- dell:inspiron_15_5566_firmware
- dell:inspiron_3277_firmware
- dell:inspiron_3465_firmware
- dell:inspiron_3477_firmware
- dell:inspiron_3482_firmware
- dell:inspiron_3502_firmware
- dell:inspiron_3510_firmware
- dell:inspiron_3565_firmware
- dell:inspiron_3582_firmware
- dell:inspiron_3782_firmware
- dell:latitude_3379_firmware
- dell:vostro_14_5468_firmware
- dell:vostro_15_5568_firmware
- dell:vostro_3267_firmware
- dell:vostro_3268_firmware
- dell:vostro_3572_firmware
- dell:vostro_3582_firmware
- dell:vostro_3660_firmware
- dell:vostro_3667_firmware
- dell:vostro_3668_firmware
- dell:vostro_3669_firmware
- dell:wyse_7040_thin_client_firmware
- dell:xps_8930_firmware