NetSight
medium5.6

CVE-2022-32482

Dell BIOS contains an improper input validation vulnerability.

Impact

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

Affected products

VendorProductAffected versions
DellAlienware M15 R6 Firmware
before 1.17.0
DellAlienware M15 R7 Firmware
before 1.10.0
DellChengming 3900 Firmware
before 1.7.3
DellG15 5510 Firmware
before 1.16.0
DellG15 5511 Firmware
before 1.18.0
DellG15 5520 Firmware
before 1.10.0
DellG16 7620 Firmware
before 1.12.0
DellG3 3500 Firmware
before 1.20.0
DellG5 15 5500 Firmware
before 1.20.0
DellG7 15 7500 Firmware
before 1.19.0
DellG7 17 7700 Firmware
before 1.19.0
DellInspiron 14 5410 2-In-1 Firmware
before 2.15.2

Weakness classification

References