CVE-2022-32491

· MEDIUMModified

← All CVEs

CVSS v3.1

4.1

EPSS

0.16%

Published

Oct 12, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-119CWE-120

Affected Products (580)

dell · alienware_area_51m_r1_firmware (up to 1.21.0)vulnerable

dell · alienware_area_51m_r1

dell · alienware_area_51m_r2_firmware (up to 1.18.0)vulnerable

dell · alienware_area_51m_r2

dell · alienware_aurora_r11_firmware (up to 1.0.16)vulnerable

dell · alienware_aurora_r11

dell · alienware_aurora_r12_firmware (up to 1.1.16)vulnerable

dell · alienware_aurora_r12

dell · alienware_aurora_r13_firmware (up to 1.5.0)vulnerable

dell · alienware_aurora_r13

dell · alienware_aurora_r10_firmware (up to 2.3.1)vulnerable

dell · alienware_aurora_r10

dell · alienware_aurora_r8_firmware (up to 1.0.23)vulnerable

dell · alienware_aurora_r8

dell · alienware_aurora_r9_firmware (up to 1.0.20)vulnerable

dell · alienware_aurora_r9

dell · alienware_m15_r1_firmware (up to 2.14.0)vulnerable

dell · alienware_m15_r1

dell · alienware_m15_r2_firmware (up to 1.17.0)vulnerable

dell · alienware_m15_r2

dell · alienware_m15_r3_firmware (up to 1.19.0)vulnerable

dell · alienware_m15_r3

dell · alienware_m15_r4_firmware (up to 1.13.0)vulnerable

dell · alienware_m15_r4

dell · alienware_m17_r1_firmware (up to 2.14.0)vulnerable

dell · alienware_m17_r1

dell · alienware_m17_r2_firmware (up to 1.17.0)vulnerable

dell · alienware_m17_r2

dell · alienware_m17_r3_firmware (up to 1.19.0)vulnerable

dell · alienware_m17_r3

dell · alienware_m17_r4_firmware (up to 1.13.0)vulnerable

dell · alienware_m17_r4

dell · alienware_x14_firmware (up to 1.5.0)vulnerable

dell · alienware_x14

dell · alienware_x15_r1_firmware (up to 1.11.0)vulnerable

dell · alienware_x15_r1

dell · alienware_x15_r2_firmware (up to 1.7.0)vulnerable

dell · alienware_x15_r2

dell · alienware_x17_r1_firmware (up to 1.11.0)vulnerable

dell · alienware_x17_r1

dell · alienware_x17_r2_firmware (up to 1.7.0)vulnerable

dell · alienware_x17_r2

dell · chengming_3980_firmware (up to 2.24.0)vulnerable

dell · chengming_3980

dell · chengming_3988_firmware (up to 1.11.0)vulnerable

dell · chengming_3988

dell · chengming_3990_firmware (up to 1.14.0)vulnerable

dell · chengming_3990

dell · chengming_3991_firmware (up to 1.14.0)vulnerable

dell · chengming_3991

...and 530 more

References (2)

https://www.dell.com/support/kbdoc/000203758

Vendor Advisory

https://www.dell.com/support/kbdoc/000203758

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs