high7.5
CVE-2022-24417
Dell BIOS contains an improper input validation vulnerability.
Impact
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Dell G5 5505 Firmware | before 1.10.0 |
| Dell | Inspiron 22-3275 Firmware | before 1.8.0 |
| Dell | Inspiron 24-3475 Firmware | before 1.8.0 |
| Dell | Inspiron 27 7775 Firmware | before 2.15.0 |
| Dell | Inspiron 3180 Firmware | before 1.4.4 |
| Dell | Inspiron 3185 Firmware | before 1.4.4 |
| Dell | Inspiron 3195 Firmware | before 1.4.1 |
| Dell | Inspiron 3505 Firmware | before 1.5.0 |
| Dell | Inspiron 3515 Firmware | before 1.4.0 |
| Dell | Inspiron 3585 Firmware | before 1.6.0 |
| Dell | Inspiron 3595 Firmware | before 1.2.1 |
| Dell | Inspiron 3785 Firmware | before 1.6.0 |