Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-24418

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 56 products from dell, from dell, from dell and 53 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2022, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2022-05-26T16:15:08.057

Last Modified

2024-11-21T06:50:23.033

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dell dell_g5_5505_firmware < 1.10.0 Yes
Hardware dell dell_g5_5505 - No
Operating System dell inspiron_22-3275_firmware < 1.8.0 Yes
Hardware dell inspiron_22-3275 - No
Operating System dell inspiron_24-3475_firmware < 1.8.0 Yes
Hardware dell inspiron_24-3475 - No
Operating System dell inspiron_27_7775_firmware < 2.15.0 Yes
Hardware dell inspiron_27_7775 - No
Operating System dell inspiron_3180_firmware < 1.4.4 Yes
Hardware dell inspiron_3180 - No
Operating System dell inspiron_3185_firmware < 1.4.4 Yes
Hardware dell inspiron_3185 - No
Operating System dell inspiron_3195_firmware < 1.4.1 Yes
Hardware dell inspiron_3195 - No
Operating System dell inspiron_3505_firmware < 1.5.0 Yes
Hardware dell inspiron_3505 - No
Operating System dell inspiron_3515_firmware < 1.4.0 Yes
Hardware dell inspiron_3515 - No
Operating System dell inspiron_3585_firmware < 1.6.0 Yes
Hardware dell inspiron_3585 - No
Operating System dell inspiron_3595_firmware < 1.2.1 Yes
Hardware dell inspiron_3595 - No
Operating System dell inspiron_3785_firmware < 1.6.0 Yes
Hardware dell inspiron_3785 - No
Operating System dell inspiron_5405_firmware < 1.6.0 Yes
Hardware dell inspiron_5405 - No
Operating System dell inspiron_5415_firmware < 1.7.1 Yes
Hardware dell inspiron_5415 - No
Operating System dell inspiron_5485_firmware < 2.7.0 Yes
Hardware dell inspiron_5485 - No
Operating System dell inspiron_5505_firmware < 1.6.0 Yes
Hardware dell inspiron_5505 - No
Operating System dell inspiron_5515_firmware < 1.7.1 Yes
Hardware dell inspiron_5515 - No
Operating System dell inspiron_5575_firmware < 1.5.0 Yes
Hardware dell inspiron_5575 - No
Operating System dell inspiron_5585_firmware < 2.7.0 Yes
Hardware dell inspiron_5585 - No
Operating System dell inspiron_5675_firmware < 1.5.0 Yes
Hardware dell inspiron_5675 - No
Operating System dell inspiron_5775_firmware < 1.5.0 Yes
Hardware dell inspiron_5775 - No
Operating System dell inspiron_7375_firmware < 1.6.0 Yes
Hardware dell inspiron_7375 - No
Operating System dell inspiron_7405_firmware < 1.7.0 Yes
Hardware dell inspiron_7405 - No
Operating System dell inspiron_7415_firmware < 1.7.1 Yes
Hardware dell inspiron_7415 - No
Operating System dell vostro_3405_firmware < 1.5.0 Yes
Hardware dell vostro_3405 - No
Operating System dell vostro_3515_firmware < 1.4.0 Yes
Hardware dell vostro_3515 - No
Operating System dell vostro_5415_firmware < 1.7.1 Yes
Hardware dell vostro_5415 - No
Operating System dell vostro_5515_firmware < 1.7.1 Yes
Hardware dell vostro_5515 - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For dell's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.