VulnerabilityModified

CVE-2022-32482

Dell BIOS contains an improper input validation vulnerability.

MEDIUM 5.1EPSS 0.16%

Does this matter?

Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

CVSS 3.1: 5.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
EPSS: 0.16% probability · 6th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: dell/alienware m15 r6 firmware · dell/alienware m15 r7 firmware · dell/chengming 3900 firmware · dell/g15 5510 firmware · dell/g15 5511 firmware · dell/g15 5520 firmware · dell/g16 7620 firmware · dell/g3 3500 firmware · dell/g5 15 5500 firmware · dell/g7 15 7500 firmware · dell/g7 17 7700 firmware · dell/inspiron 14 5410 2-in-1 firmware · dell/inspiron 14 plus 7420 firmware · dell/inspiron 15 3511 firmware · dell/inspiron 16 plus 7620 firmware · dell/inspiron 3490 firmware · dell/inspiron 3493 firmware · dell/inspiron 3501 firmware · dell/inspiron 3511 firmware · dell/inspiron 3520 firmware · +40 more
Source: security_alert@emc.com

References

https://www.dell.com/support/kbdoc/en-us/000205717/dsa-2022-326Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000205717/dsa-2022-326Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.