CVE-2022-24420

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-24420
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:alienware_13_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_13_r3:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:alienware_15_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_15_r3:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dell:alienware_15_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_15_r4:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dell:alienware_17_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_17_r4:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dell:alienware_17_r5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_17_r5:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dell:alienware_area_51m_r1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_area_51m_r1:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dell:alienware_area_51m_r2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_area_51m_r2:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dell:alienware_aurora_r8_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_aurora_r8:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dell:alienware_m15_r2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r2:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dell:alienware_m15_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r3:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dell:alienware_m15_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r4:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dell:alienware_m17_r2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m17_r2:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dell:alienware_m17_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m17_r3:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:dell:alienware_m17_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m17_r4:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:dell:alienware_x15_r1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_x15_r1:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:dell:alienware_x17_r1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_x17_r1:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:edge_gateway_3000:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:edge_gateway_5000:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:dell:edge_gateway_5100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:edge_gateway_5100:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:dell:inspiron_14_3473_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_14_3473:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:dell:inspiron_15_3573_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_3573:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:dell:inspiron_15_5566_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_5566:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:dell:inspiron_3277_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3277:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:dell:inspiron_3465_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3465:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:dell:inspiron_3477_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3477:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:dell:inspiron_3482_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3482:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:dell:inspiron_3502_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3502:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:dell:inspiron_3510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3510:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:dell:inspiron_3565_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3565:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:dell:inspiron_3582_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3582:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:dell:inspiron_3782_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3782:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:dell:latitude_3379_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3379:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:dell:vostro_14_5468_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_14_5468:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:dell:vostro_15_5568_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_15_5568:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:dell:vostro_3267_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3267:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:dell:vostro_3268_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3268:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:dell:vostro_3572_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3572:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:dell:vostro_3582_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3582:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:dell:vostro_3660_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3660:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:dell:vostro_3667_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3667:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:dell:vostro_3668_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3668:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:dell:vostro_3669_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3669:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:dell:xps_8930_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_8930:-:*:*:*:*:*:*:*
History

30 Jun 2023, 18:41

Type Values Removed Values Added
CWE CWE-20 CWE-119

18 Mar 2022, 20:22

Type Values Removed Values Added
References (MISC) https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053 - (MISC) https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053 - Vendor Advisory
CWE CWE-20
CVSS v2 : unknown
v3 : unknown 		v2 : 7.2
v3 : 7.8
CPE cpe:2.3:o:dell:vostro_3582_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_15_r4:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_x15_r1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3502_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3482_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_5566:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:edge_gateway_3000:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_15_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3510:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3667_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_15_3573_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3667:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_m15_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_aurora_r8_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3379_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3582:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3582:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_14_5468_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_area_51m_r1:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_13_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_area_51m_r2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_17_r5:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_m15_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_14_5468:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3669:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_3573:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_17_r4:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3465_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_area_51m_r2:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3669_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3565:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3267:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_m17_r2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r2:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m17_r3:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3660:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_15_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_15_5566_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_m17_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:edge_gateway_5100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_17_r5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_aurora_r8:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3477_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3379:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_area_51m_r1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_m15_r2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r3:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3277_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3268_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3482:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3572_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3267_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m17_r4:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_15_r3:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:edge_gateway_5100:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_8930_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_17_r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_x15_r1:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3660_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m17_r2:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3268:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r4:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3668_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3582_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_13_r3:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3502:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:edge_gateway_5000:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3668:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3565_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_x17_r1:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_x17_r1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3782:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_8930:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_m17_r3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3572:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3782_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3277:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_14_3473:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_14_3473_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3477:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3465:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_15_5568_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_15_5568:-:*:*:*:*:*:*:*

11 Mar 2022, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-03-11 22:15

Updated : 2024-02-04 22:29

NVD link : CVE-2022-24420

Mitre link : CVE-2022-24420

CVE.ORG link : CVE-2022-24420

JSON object : View

Products Affected

dell

  • embedded_box_pc_3000
  • alienware_m15_r4_firmware
  • alienware_aurora_r8_firmware
  • vostro_3267_firmware
  • vostro_14_5468
  • xps_8930_firmware
  • inspiron_15_5566
  • inspiron_3565
  • latitude_3379_firmware
  • wyse_7040_thin_client
  • alienware_area_51m_r1_firmware
  • vostro_3267
  • alienware_m15_r2
  • inspiron_3582_firmware
  • inspiron_3482_firmware
  • edge_gateway_3000_firmware
  • inspiron_15_3573
  • inspiron_3465_firmware
  • vostro_3668_firmware
  • vostro_15_5568
  • edge_gateway_5000
  • alienware_15_r3_firmware
  • inspiron_3465
  • inspiron_3510
  • edge_gateway_3000
  • inspiron_3502
  • alienware_m17_r3
  • vostro_3668
  • alienware_m17_r4
  • wyse_7040_thin_client_firmware
  • inspiron_3477_firmware
  • vostro_3667_firmware
  • alienware_13_r3
  • alienware_area_51m_r1
  • inspiron_3482
  • vostro_3582
  • vostro_3660
  • edge_gateway_5100_firmware
  • vostro_3582_firmware
  • alienware_m17_r4_firmware
  • vostro_3669_firmware
  • inspiron_3565_firmware
  • inspiron_3277
  • alienware_m15_r3
  • inspiron_3782
  • vostro_3572_firmware
  • alienware_aurora_r8
  • edge_gateway_5000_firmware
  • inspiron_3502_firmware
  • embedded_box_pc_5000
  • inspiron_15_3573_firmware
  • alienware_17_r4
  • alienware_15_r3
  • alienware_17_r4_firmware
  • inspiron_3782_firmware
  • inspiron_3582
  • alienware_x17_r1_firmware
  • vostro_3268_firmware
  • alienware_15_r4
  • vostro_15_5568_firmware
  • inspiron_15_5566_firmware
  • alienware_x17_r1
  • inspiron_3477
  • vostro_3667
  • alienware_15_r4_firmware
  • alienware_x15_r1
  • embedded_box_pc_5000_firmware
  • inspiron_14_3473_firmware
  • alienware_m17_r2_firmware
  • alienware_13_r3_firmware
  • alienware_area_51m_r2
  • vostro_3669
  • vostro_3660_firmware
  • edge_gateway_5100
  • inspiron_3510_firmware
  • alienware_m15_r4
  • alienware_m15_r3_firmware
  • vostro_14_5468_firmware
  • inspiron_14_3473
  • alienware_m17_r3_firmware
  • inspiron_3277_firmware
  • latitude_3379
  • xps_8930
  • alienware_m15_r2_firmware
  • alienware_17_r5
  • embedded_box_pc_3000_firmware
  • alienware_m17_r2
  • vostro_3572
  • alienware_area_51m_r2_firmware
  • alienware_17_r5_firmware
  • alienware_x15_r1_firmware
  • vostro_3268
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer