1. Home
  2. CVE Database
  3. CVE-2022-24418
HIGH · 7.5

CVE-2022-24418

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during S...

Vulnerability Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DellDell G5 5505 Firmware< 1.10.0
DellDell G5 5505-
DellInspiron 22-3275 Firmware< 1.8.0
DellInspiron 22-3275-
DellInspiron 24-3475 Firmware< 1.8.0
DellInspiron 24-3475-
DellInspiron 27 7775 Firmware< 2.15.0
DellInspiron 27 7775-
DellInspiron 3180 Firmware< 1.4.4
DellInspiron 3180-
DellInspiron 3185 Firmware< 1.4.4
DellInspiron 3185-
DellInspiron 3195 Firmware< 1.4.1
DellInspiron 3195-
DellInspiron 3505 Firmware< 1.5.0
DellInspiron 3505-
DellInspiron 3515 Firmware< 1.4.0
DellInspiron 3515-
DellInspiron 3585 Firmware< 1.6.0
DellInspiron 3585-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2022-24418?

CVE-2022-24418 is a vulnerability with a CVSS score of 7.5 (HIGH). Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during S...

How severe is CVE-2022-24418?

CVE-2022-24418 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-24418?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Dell G5 5505 Firmware, Dell Dell G5 5505, Dell Inspiron 22-3275 Firmware, Dell Inspiron 22-3275, Dell Inspiron 24-3475 Firmware.