CVE-2022-24417

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 26-05-2022 06:15

Last modified: - 07-06-2022 07:03

Total changes: - 2

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

High

Privileges required

Unchanged

Scope

None

User interaction

6.7

Base score

0.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=dell AND product=dell_g5_5505_firmware AND versionEndExcluding=1.10.0

vendor=dell AND product=dell_g5_5505 AND version=-

AND

vendor=dell AND product=inspiron_22-3275_firmware AND versionEndExcluding=1.8.0

vendor=dell AND product=inspiron_22-3275 AND version=-

AND

vendor=dell AND product=inspiron_24-3475_firmware AND versionEndExcluding=1.8.0

vendor=dell AND product=inspiron_24-3475 AND version=-

AND

vendor=dell AND product=inspiron_27_7775_firmware AND versionEndExcluding=2.15.0

vendor=dell AND product=inspiron_27_7775 AND version=-

AND

vendor=dell AND product=inspiron_3180_firmware AND versionEndExcluding=1.4.4

vendor=dell AND product=inspiron_3180 AND version=-

AND

vendor=dell AND product=inspiron_3185_firmware AND versionEndExcluding=1.4.4

vendor=dell AND product=inspiron_3185 AND version=-

AND

vendor=dell AND product=inspiron_3195_firmware AND versionEndExcluding=1.4.1

vendor=dell AND product=inspiron_3195 AND version=-

AND

vendor=dell AND product=inspiron_3505_firmware AND versionEndExcluding=1.5.0

vendor=dell AND product=inspiron_3505 AND version=-

AND

vendor=dell AND product=inspiron_3515_firmware AND versionEndExcluding=1.4.0

vendor=dell AND product=inspiron_3515 AND version=-

AND

vendor=dell AND product=inspiron_3585_firmware AND versionEndExcluding=1.6.0

vendor=dell AND product=inspiron_3585 AND version=-

AND

vendor=dell AND product=inspiron_3595_firmware AND versionEndExcluding=1.2.1

vendor=dell AND product=inspiron_3595 AND version=-

AND

vendor=dell AND product=inspiron_3785_firmware AND versionEndExcluding=1.6.0

vendor=dell AND product=inspiron_3785 AND version=-

AND

vendor=dell AND product=inspiron_5405_firmware AND versionEndExcluding=1.6.0

vendor=dell AND product=inspiron_5405 AND version=-

AND

vendor=dell AND product=inspiron_5415_firmware AND versionEndExcluding=1.7.1

vendor=dell AND product=inspiron_5415 AND version=-

AND

vendor=dell AND product=inspiron_5485_firmware AND versionEndExcluding=2.7.0

vendor=dell AND product=inspiron_5485 AND version=-

AND

vendor=dell AND product=inspiron_5505_firmware AND versionEndExcluding=1.6.0

vendor=dell AND product=inspiron_5505 AND version=-

AND

vendor=dell AND product=inspiron_5515_firmware AND versionEndExcluding=1.7.1

vendor=dell AND product=inspiron_5515 AND version=-

AND

vendor=dell AND product=inspiron_5575_firmware AND versionEndExcluding=1.5.0

vendor=dell AND product=inspiron_5575 AND version=-

AND

vendor=dell AND product=inspiron_5585_firmware AND versionEndExcluding=2.7.0

vendor=dell AND product=inspiron_5585 AND version=-

AND

vendor=dell AND product=inspiron_5675_firmware AND versionEndExcluding=1.5.0

vendor=dell AND product=inspiron_5675 AND version=-

AND

vendor=dell AND product=inspiron_5775_firmware AND versionEndExcluding=1.5.0

vendor=dell AND product=inspiron_5775 AND version=-

AND

vendor=dell AND product=inspiron_7375_firmware AND versionEndExcluding=1.6.0

vendor=dell AND product=inspiron_7375 AND version=-

AND

vendor=dell AND product=inspiron_7405_firmware AND versionEndExcluding=1.7.0

vendor=dell AND product=inspiron_7405 AND version=-

AND

vendor=dell AND product=inspiron_7415_firmware AND versionEndExcluding=1.7.1

vendor=dell AND product=inspiron_7415 AND version=-

AND

vendor=dell AND product=vostro_3405_firmware AND versionEndExcluding=1.5.0

vendor=dell AND product=vostro_3405 AND version=-

AND

vendor=dell AND product=vostro_3515_firmware AND versionEndExcluding=1.4.0

vendor=dell AND product=vostro_3515 AND version=-

AND

vendor=dell AND product=vostro_5415_firmware AND versionEndExcluding=1.7.1

vendor=dell AND product=vostro_5415 AND version=-

AND

vendor=dell AND product=vostro_5515_firmware AND versionEndExcluding=1.7.1

vendor=dell AND product=vostro_5515 AND version=-

Reference

https://www.dell.com/support/kbdoc/en-us/000199285/dsa-2022-095

Keywords

CVE-2022-24417

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-24417

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures