Dell CPG vulnerabilities, page 4
110 vulnerabilities
Known vulnerabilities in Dell CPG, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-34390dell · alienware_area-51_r4_firmware +2 moredell alienware_area-51_r4_firmwareDell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.EPSS0.18%HighCVE-2022-34401dell · alienware_m15_a6_firmware +3 moredell alienware_m15_a6_firmwareDell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in SMRAM.EPSS0.17%MediumCVE-2024-0160dell · cpg bios +15 moredell cpg biosDell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.EPSS0.25%MediumCVE-2024-0158dell · alienware_m15_r6_firmware +388 moredell alienware_m15_r6_firmwareDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privilegesEPSS0.15%HighCVE-2024-22429dell · cpg bios +50 moredell cpg biosDell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.EPSS0.21%MediumCVE-2024-22448dell · alienware_m15_r6_firmware +268 moredell alienware_m15_r6_firmwareDell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.EPSS0.18%MediumCVE-2024-28970dell · cpg bios +14 moredell cpg biosDell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.EPSS0.14%MediumCVE-2024-32856dell · alienware_area_51m_r2_firmware +23 moredell alienware_area_51m_r2_firmwareDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.EPSS0.15%HighCVE-2024-32859dell · alienware_area_51m_r2_firmware +23 moredell alienware_area_51m_r2_firmwareDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.EPSS0.18%MediumCVE-2024-32855dell · cpg bios +74 moredell cpg biosDell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.EPSS0.13%HighCVE-2024-32858dell · alienware_area_51m_r2_firmware +23 moredell alienware_area_51m_r2_firmwareDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.EPSS0.18%HighCVE-2024-32860dell · alienware_area_51m_r2_firmware +22 moredell alienware_area_51m_r2_firmwareDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.EPSS0.18%HighCVE-2019-18579dell · cpg bios +1 moredell cpg biosSettings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt (and PCIe behind TBT) pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's system can obtain read or write access to main memory via a DMA attack during platform boot.EPSS0.34%MediumCVE-2023-48674dell · cpg bios +173 moredell cpg biosDell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.EPSS0.49%MediumCVE-2023-39251dell · cpg bios +13 moredell cpg biosDell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.EPSS0.17%MediumCVE-2023-25936dell · alienware_area_51m_r1_firmware +434 moredell alienware_area_51m_r1_firmwareDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.EPSS0.17%MediumCVE-2023-25938dell · alienware_area_51m_r1_firmware +434 moredell alienware_area_51m_r1_firmwareDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.EPSS0.17%MediumCVE-2023-25937dell · alienware_area_51m_r1_firmware +434 moredell alienware_area_51m_r1_firmwareDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.EPSS0.17%HighCVE-2023-43088dell · cpg bios +1 moredell cpg biosDell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.EPSS0.28%MediumCVE-2023-28064dell · alienware_m15_r6_firmware +70 moredell alienware_m15_r6_firmwareDell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.EPSS0.26%