Dell CPG vulnerabilities, page 3
110 vulnerabilities
Known vulnerabilities in Dell CPG, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-24420dellalienware_13_r3_firmware+46
EPSS score0.29%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.CVE-2022-24418dellcpg bios+28EPSS score0.25%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.CVE-2022-24415dellalienware_13_r3_firmware+46EPSS score0.29%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.CVE-2022-24410dellalienware_13_r2_firmware+157EPSS score0.17%
Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.CVE-2022-32488dellalienware_area_51m_r1_firmware+290EPSS score0.25%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-32493dellalienware_area_51m_r1_firmware+290EPSS score0.21%
Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-32482dellalienware_m15_r6_firmware+189EPSS score0.16%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.CVE-2022-32484dellalienware_area_51m_r1_firmware+290EPSS score0.18%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.CVE-2022-32489dellalienware_area_51m_r1_firmware+290EPSS score0.25%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-32483dellalienware_area_51m_r1_firmware+290EPSS score0.18%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.CVE-2022-32487dellalienware_area_51m_r1_firmware+290EPSS score0.22%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-32492dellbios+1EPSS score0.22%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-32486dellbios+1EPSS score0.22%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-32485dellalienware_area_51m_r1_firmware+290EPSS score0.22%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-32491dellalienware_area_51m_r1_firmware+290EPSS score0.17%
Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM.CVE-2022-34399dellalienware_m15_a6_firmware+15EPSS score0.18%
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.CVE-2022-34403dellalienware_m15_r6_firmware+83EPSS score0.17%
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.CVE-2022-34391dellalienware_area-51_r4_firmware+2EPSS score0.18%
Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2022-34398dellalienware_area_51m_r1_firmware+239EPSS score0.16%
Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.CVE-2022-34400dellalienware_m15_r6_firmware+83EPSS score0.21%
Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM.