CVE-2022-24410: dell alienware_13_r2_firmware

Vulnerability summary

CVE-2022-24410 is a medium (CVSS 6.8) vulnerability in dell alienware_13_r2_firmware. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.9% of scored vulnerabilities.

Timeline

1. 10-02-2023
   PublishedVulnerability first disclosed.
2. 24-03-2025
   Last modifiedVulnerability information updated.

Description

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
• CWE-312Cleartext Storage of Sensitive InformationThe product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.