ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-24420

—
CVSS 3.1
7.8 high
EPSS
<1%p22
Published
()
Modified
Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Vendors
dell
Products
alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware, alienware 17 r4 firmware, alienware 17 r5 firmware, alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r8 firmware, alienware m15 r2 firmware, alienware m15 r3 firmware, alienware m15 r4 firmware, alienware m17 r2 firmware
Weakness
CWE-119
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news