CVE-2022-24418

Published: May 26, 2022Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Affected (28)

Dell

28 products

Dell G5 5505 Firmware

Inspiron 22 3275 Firmware

Inspiron 24 3475 Firmware

Inspiron 27 7775 Firmware

Inspiron 3180 Firmware

Inspiron 3185 Firmware

Inspiron 3195 Firmware

Inspiron 3505 Firmware

Inspiron 3515 Firmware

Inspiron 3585 Firmware

Inspiron 3595 Firmware

Inspiron 3785 Firmware

Inspiron 5405 Firmware

Inspiron 5415 Firmware

Inspiron 5485 Firmware

Inspiron 5505 Firmware

Inspiron 5515 Firmware

Inspiron 5575 Firmware

Inspiron 5585 Firmware

Inspiron 5675 Firmware

Inspiron 5775 Firmware

Inspiron 7375 Firmware

Inspiron 7405 Firmware

Inspiron 7415 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Dell G5 5505 Firmware	Before 1.10.0

Running on/with	Platform Versions
Dell Dell G5 5505	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 22 3275 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Inspiron 22 3275	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 24 3475 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Inspiron 24 3475	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 27 7775 Firmware	Before 2.15.0

Running on/with	Platform Versions
Dell Inspiron 27 7775	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3180 Firmware	Before 1.4.4

Running on/with	Platform Versions
Dell Inspiron 3180	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3185 Firmware	Before 1.4.4

Running on/with	Platform Versions
Dell Inspiron 3185	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3195 Firmware	Before 1.4.1

Running on/with	Platform Versions
Dell Inspiron 3195	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3505 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Inspiron 3505	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3515 Firmware	Before 1.4.0

Running on/with	Platform Versions
Dell Inspiron 3515	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3585 Firmware	Before 1.6.0

Running on/with	Platform Versions
Dell Inspiron 3585	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3595 Firmware	Before 1.2.1

Running on/with	Platform Versions
Dell Inspiron 3595	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3785 Firmware	Before 1.6.0

Running on/with	Platform Versions
Dell Inspiron 3785	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5405 Firmware	Before 1.6.0

Running on/with	Platform Versions
Dell Inspiron 5405	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5415 Firmware	Before 1.7.1

Running on/with	Platform Versions
Dell Inspiron 5415	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5485 Firmware	Before 2.7.0

Running on/with	Platform Versions
Dell Inspiron 5485	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5505 Firmware	Before 1.6.0

Running on/with	Platform Versions
Dell Inspiron 5505	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5515 Firmware	Before 1.7.1

Running on/with	Platform Versions
Dell Inspiron 5515	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5575 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Inspiron 5575	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5585 Firmware	Before 2.7.0

Running on/with	Platform Versions
Dell Inspiron 5585	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5675 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Inspiron 5675	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5775 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Inspiron 5775	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7375 Firmware	Before 1.6.0

Running on/with	Platform Versions
Dell Inspiron 7375	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7405 Firmware	Before 1.7.0

Running on/with	Platform Versions
Dell Inspiron 7405	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7415 Firmware	Before 1.7.1

Running on/with	Platform Versions
Dell Inspiron 7415	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 3405 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Vostro 3405	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 3515 Firmware	Before 1.4.0

Running on/with	Platform Versions
Dell Vostro 3515	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5415 Firmware	Before 1.7.1

Running on/with	Platform Versions
Dell Vostro 5415	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5515 Firmware	Before 1.7.1

Running on/with	Platform Versions
Dell Vostro 5515	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.dell.com/support/kbdoc/en-us/000199285/dsa-2022-095

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000199285/dsa-2022-095

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.