Dell Precision 5720 Aio vulnerabilities

41 vulnerabilities

Known vulnerabilities in Dell Precision 5720 Aio, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2021-36343dellalienware_13_r3_firmware+411
EPSS score
0.24%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5CVE-2021-36342dellalienware_13_r3_firmware+411
EPSS score
0.25%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.1CVE-2020-5362dellchengming_3967_firmware+354
EPSS score
0.29%
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
8.2CVE-2022-32488dellalienware_area_51m_r1_firmware+290
EPSS score
0.25%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.8CVE-2022-32493dellalienware_area_51m_r1_firmware+290
EPSS score
0.21%
Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
5.6CVE-2022-32484dellalienware_area_51m_r1_firmware+290
EPSS score
0.18%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
8.2CVE-2022-32489dellalienware_area_51m_r1_firmware+290
EPSS score
0.25%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
5.6CVE-2022-32483dellalienware_area_51m_r1_firmware+290
EPSS score
0.18%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
7.8CVE-2022-32487dellalienware_area_51m_r1_firmware+290
EPSS score
0.22%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.8CVE-2022-32485dellalienware_area_51m_r1_firmware+290
EPSS score
0.22%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.8CVE-2022-32491dellalienware_area_51m_r1_firmware+290
EPSS score
0.17%
Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM.
7.2CVE-2019-3717dellchengming_3967_firmware+241
EPSS score
0.36%
Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.
6.8CVE-2023-48674dellcpg bios+173
EPSS score
0.49%
Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.
6.7CVE-2023-25936dellalienware_area_51m_r1_firmware+434
EPSS score
0.17%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7CVE-2023-25938dellalienware_area_51m_r1_firmware+434
EPSS score
0.17%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7CVE-2023-25937dellalienware_area_51m_r1_firmware+434
EPSS score
0.17%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7CVE-2023-28039dellalienware_area_51m_r1_firmware+434
EPSS score
0.17%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7CVE-2023-28030dellalienware_area_51m_r1_firmware+434
EPSS score
0.17%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7CVE-2023-28056dellalienware_area_51m_r1_firmware+434
EPSS score
0.17%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7CVE-2023-28060dellalienware_area_51m_r1_firmware+434
EPSS score
0.17%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.