Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-24421 Details

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:8.2 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053	CVE	Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
dell alienware 13 r3 firmware	< 1.16.1
CPE cpe:2.3:o:dell:alienware_13_r3_firmware:::::::: Remediation No remediation found in references.
dell alienware 13 r3	All versions
CPE cpe:2.3:h:dell:alienware_13_r3:-:::::::* Remediation No remediation found in references.
dell alienware 15 r3 firmware	< 1.16.1
CPE cpe:2.3:o:dell:alienware_15_r3_firmware:::::::: Remediation No remediation found in references.
dell alienware 15 r3	All versions
CPE cpe:2.3:h:dell:alienware_15_r3:-:::::::* Remediation No remediation found in references.
dell alienware 15 r4 firmware	< 1.17.0
CPE cpe:2.3:o:dell:alienware_15_r4_firmware:::::::: Remediation No remediation found in references.
dell alienware 15 r4	All versions
CPE cpe:2.3:h:dell:alienware_15_r4:-:::::::* Remediation No remediation found in references.
dell alienware 17 r4 firmware	< 1.16.1
CPE cpe:2.3:o:dell:alienware_17_r4_firmware:::::::: Remediation No remediation found in references.
dell alienware 17 r4	All versions
CPE cpe:2.3:h:dell:alienware_17_r4:-:::::::* Remediation No remediation found in references.
dell alienware 17 r5 firmware	< 1.17.0
CPE cpe:2.3:o:dell:alienware_17_r5_firmware:::::::: Remediation No remediation found in references.
dell alienware 17 r5	All versions
CPE cpe:2.3:h:dell:alienware_17_r5:-:::::::* Remediation No remediation found in references.
dell alienware area 51m r1 firmware	< 1.18.0
CPE cpe:2.3:o:dell:alienware_area_51m_r1_firmware:::::::: Remediation No remediation found in references.
dell alienware area 51m r1	All versions
CPE cpe:2.3:h:dell:alienware_area_51m_r1:-:::::::* Remediation No remediation found in references.
dell alienware area 51m r2 firmware	< 1.13.0
CPE cpe:2.3:o:dell:alienware_area_51m_r2_firmware:::::::: Remediation No remediation found in references.
dell alienware area 51m r2	All versions
CPE cpe:2.3:h:dell:alienware_area_51m_r2:-:::::::* Remediation No remediation found in references.
dell alienware aurora r8 firmware	< 1.0.20
CPE cpe:2.3:o:dell:alienware_aurora_r8_firmware:::::::: Remediation No remediation found in references.
dell alienware aurora r8	All versions
CPE cpe:2.3:h:dell:alienware_aurora_r8:-:::::::* Remediation No remediation found in references.
dell alienware m15 r2 firmware	< 1.12.0
CPE cpe:2.3:o:dell:alienware_m15_r2_firmware:::::::: Remediation No remediation found in references.
dell alienware m15 r2	All versions
CPE cpe:2.3:h:dell:alienware_m15_r2:-:::::::* Remediation No remediation found in references.
dell alienware m15 r3 firmware	< 1.14.0
CPE cpe:2.3:o:dell:alienware_m15_r3_firmware:::::::: Remediation No remediation found in references.
dell alienware m15 r3	All versions
CPE cpe:2.3:h:dell:alienware_m15_r3:-:::::::* Remediation No remediation found in references.
dell alienware m15 r4 firmware	< 1.8.0
CPE cpe:2.3:o:dell:alienware_m15_r4_firmware:::::::: Remediation No remediation found in references.
dell alienware m15 r4	All versions
CPE cpe:2.3:h:dell:alienware_m15_r4:-:::::::* Remediation No remediation found in references.
dell alienware m17 r2 firmware	< 1.12.0
CPE cpe:2.3:o:dell:alienware_m17_r2_firmware:::::::: Remediation No remediation found in references.
dell alienware m17 r2	All versions
CPE cpe:2.3:h:dell:alienware_m17_r2:-:::::::* Remediation No remediation found in references.
dell alienware m17 r3 firmware	< 1.14.0
CPE cpe:2.3:o:dell:alienware_m17_r3_firmware:::::::: Remediation No remediation found in references.
dell alienware m17 r3	All versions
CPE cpe:2.3:h:dell:alienware_m17_r3:-:::::::* Remediation No remediation found in references.
dell alienware m17 r4 firmware	< 1.8.0
CPE cpe:2.3:o:dell:alienware_m17_r4_firmware:::::::: Remediation No remediation found in references.
dell alienware m17 r4	All versions
CPE cpe:2.3:h:dell:alienware_m17_r4:-:::::::* Remediation No remediation found in references.
dell alienware x15 r1 firmware	< 1.7.0
CPE cpe:2.3:o:dell:alienware_x15_r1_firmware:::::::: Remediation No remediation found in references.
dell alienware x15 r1	All versions
CPE cpe:2.3:h:dell:alienware_x15_r1:-:::::::* Remediation No remediation found in references.
dell alienware x17 r1 firmware	< 1.7.0
CPE cpe:2.3:o:dell:alienware_x17_r1_firmware:::::::: Remediation No remediation found in references.
dell alienware x17 r1	All versions
CPE cpe:2.3:h:dell:alienware_x17_r1:-:::::::* Remediation No remediation found in references.
dell edge gateway 3000 firmware	< 1.7.0
CPE cpe:2.3:o:dell:edge_gateway_3000_firmware:::::::: Remediation No remediation found in references.
dell edge gateway 3000	All versions
CPE cpe:2.3:h:dell:edge_gateway_3000:-:::::::* Remediation No remediation found in references.
dell edge gateway 5000 firmware	< 1.17.0
CPE cpe:2.3:o:dell:edge_gateway_5000_firmware:::::::: Remediation No remediation found in references.
dell edge gateway 5000	All versions
CPE cpe:2.3:h:dell:edge_gateway_5000:-:::::::* Remediation No remediation found in references.
dell edge gateway 5100 firmware	< 1.17.0
CPE cpe:2.3:o:dell:edge_gateway_5100_firmware:::::::: Remediation No remediation found in references.
dell edge gateway 5100	All versions
CPE cpe:2.3:h:dell:edge_gateway_5100:-:::::::* Remediation No remediation found in references.
dell embedded box pc 3000 firmware	< 1.13.0
CPE cpe:2.3:o:dell:embedded_box_pc_3000_firmware:::::::: Remediation No remediation found in references.
dell embedded box pc 3000	All versions
CPE cpe:2.3:h:dell:embedded_box_pc_3000:-:::::::* Remediation No remediation found in references.
dell embedded box pc 5000 firmware	< 1.14.0
CPE cpe:2.3:o:dell:embedded_box_pc_5000_firmware:::::::: Remediation No remediation found in references.
dell embedded box pc 5000	All versions
CPE cpe:2.3:h:dell:embedded_box_pc_5000:-:::::::* Remediation No remediation found in references.
dell inspiron 14 3473 firmware	< 1.14.0
CPE cpe:2.3:o:dell:inspiron_14_3473_firmware:::::::: Remediation No remediation found in references.
dell inspiron 14 3473	All versions
CPE cpe:2.3:h:dell:inspiron_14_3473:-:::::::* Remediation No remediation found in references.
dell inspiron 15 3573 firmware	< 1.14.0
CPE cpe:2.3:o:dell:inspiron_15_3573_firmware:::::::: Remediation No remediation found in references.
dell inspiron 15 3573	All versions
CPE cpe:2.3:h:dell:inspiron_15_3573:-:::::::* Remediation No remediation found in references.
dell inspiron 15 5566 firmware	< 1.18.0
CPE cpe:2.3:o:dell:inspiron_15_5566_firmware:::::::: Remediation No remediation found in references.
dell inspiron 15 5566	All versions
CPE cpe:2.3:h:dell:inspiron_15_5566:-:::::::* Remediation No remediation found in references.
dell inspiron 3277 firmware	< 1.19.0
CPE cpe:2.3:o:dell:inspiron_3277_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3277	All versions
CPE cpe:2.3:h:dell:inspiron_3277:-:::::::* Remediation No remediation found in references.
dell inspiron 3465 firmware	< 1.12.0
CPE cpe:2.3:o:dell:inspiron_3465_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3465	All versions
CPE cpe:2.3:h:dell:inspiron_3465:-:::::::* Remediation No remediation found in references.
dell inspiron 3477 firmware	< 1.19.0
CPE cpe:2.3:o:dell:inspiron_3477_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3477	All versions
CPE cpe:2.3:h:dell:inspiron_3477:-:::::::* Remediation No remediation found in references.
dell inspiron 3482 firmware	< 1.13.0
CPE cpe:2.3:o:dell:inspiron_3482_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3482	All versions
CPE cpe:2.3:h:dell:inspiron_3482:-:::::::* Remediation No remediation found in references.
dell inspiron 3502 firmware	< 1.7.0
CPE cpe:2.3:o:dell:inspiron_3502_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3502	All versions
CPE cpe:2.3:h:dell:inspiron_3502:-:::::::* Remediation No remediation found in references.
dell inspiron 3510 firmware	< 1.6.0
CPE cpe:2.3:o:dell:inspiron_3510_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3510	All versions
CPE cpe:2.3:h:dell:inspiron_3510:-:::::::* Remediation No remediation found in references.
dell inspiron 3565 firmware	< 1.12.0
CPE cpe:2.3:o:dell:inspiron_3565_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3565	All versions
CPE cpe:2.3:h:dell:inspiron_3565:-:::::::* Remediation No remediation found in references.
dell inspiron 3582 firmware	< 1.13.0
CPE cpe:2.3:o:dell:inspiron_3582_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3582	All versions
CPE cpe:2.3:h:dell:inspiron_3582:-:::::::* Remediation No remediation found in references.
dell inspiron 3782 firmware	< 1.13.0
CPE cpe:2.3:o:dell:inspiron_3782_firmware:::::::: Remediation No remediation found in references.
dell inspiron 3782	All versions
CPE cpe:2.3:h:dell:inspiron_3782:-:::::::* Remediation No remediation found in references.
dell latitude 3379 firmware	< 1.0.34
CPE cpe:2.3:o:dell:latitude_3379_firmware:::::::: Remediation No remediation found in references.
dell latitude 3379	All versions
CPE cpe:2.3:h:dell:latitude_3379:-:::::::* Remediation No remediation found in references.
dell vostro 14 5468 firmware	< 1.19.0
CPE cpe:2.3:o:dell:vostro_14_5468_firmware:::::::: Remediation No remediation found in references.
dell vostro 14 5468	All versions
CPE cpe:2.3:h:dell:vostro_14_5468:-:::::::* Remediation No remediation found in references.
dell vostro 15 5568 firmware	< 1.19.0
CPE cpe:2.3:o:dell:vostro_15_5568_firmware:::::::: Remediation No remediation found in references.
dell vostro 15 5568	All versions
CPE cpe:2.3:h:dell:vostro_15_5568:-:::::::* Remediation No remediation found in references.
dell vostro 3267 firmware	< 1.20.0
CPE cpe:2.3:o:dell:vostro_3267_firmware:::::::: Remediation No remediation found in references.
dell vostro 3267	All versions
CPE cpe:2.3:h:dell:vostro_3267:-:::::::* Remediation No remediation found in references.
dell vostro 3268 firmware	< 1.20.0
CPE cpe:2.3:o:dell:vostro_3268_firmware:::::::: Remediation No remediation found in references.
dell vostro 3268	All versions
CPE cpe:2.3:h:dell:vostro_3268:-:::::::* Remediation No remediation found in references.
dell vostro 3572 firmware	< 1.14.0
CPE cpe:2.3:o:dell:vostro_3572_firmware:::::::: Remediation No remediation found in references.
dell vostro 3572	All versions
CPE cpe:2.3:h:dell:vostro_3572:-:::::::* Remediation No remediation found in references.
dell vostro 3582 firmware	< 1.13.0
CPE cpe:2.3:o:dell:vostro_3582_firmware:::::::: Remediation No remediation found in references.
dell vostro 3582	All versions
CPE cpe:2.3:h:dell:vostro_3582:-:::::::* Remediation No remediation found in references.
dell vostro 3660 firmware	< 1.20.0
CPE cpe:2.3:o:dell:vostro_3660_firmware:::::::: Remediation No remediation found in references.
dell vostro 3660	All versions
CPE cpe:2.3:h:dell:vostro_3660:-:::::::* Remediation No remediation found in references.
dell vostro 3667 firmware	< 1.20.0
CPE cpe:2.3:o:dell:vostro_3667_firmware:::::::: Remediation No remediation found in references.
dell vostro 3667	All versions
CPE cpe:2.3:h:dell:vostro_3667:-:::::::* Remediation No remediation found in references.
dell vostro 3668 firmware	< 1.20.0
CPE cpe:2.3:o:dell:vostro_3668_firmware:::::::: Remediation No remediation found in references.
dell vostro 3668	All versions
CPE cpe:2.3:h:dell:vostro_3668:-:::::::* Remediation No remediation found in references.
dell vostro 3669 firmware	< 1.20.0
CPE cpe:2.3:o:dell:vostro_3669_firmware:::::::: Remediation No remediation found in references.
dell vostro 3669	All versions
CPE cpe:2.3:h:dell:vostro_3669:-:::::::* Remediation No remediation found in references.
dell wyse 7040 thin client firmware	< 1.15.0
CPE cpe:2.3:o:dell:wyse_7040_thin_client_firmware:::::::: Remediation No remediation found in references.
dell wyse 7040 thin client	All versions
CPE cpe:2.3:h:dell:wyse_7040_thin_client:-:::::::* Remediation No remediation found in references.
dell xps 8930 firmware	< 1.1.21
CPE cpe:2.3:o:dell:xps_8930_firmware:::::::: Remediation No remediation found in references.
dell xps 8930	All versions
CPE cpe:2.3:h:dell:xps_8930:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jun 30, 2023	Reanalysis	[email protected]
Mar 18, 2022	Initial Analysis	[email protected]

CVE-2022-24421 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation