CVE-2022-24410

Severity: medium (CVSS 4.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-10 · updated 2026-06-17
Weakness: CWE-200

Description

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.

Affected products

Dell Alienware 13 R2 Firmware: before 1.13.1 — fixed in 1.13.1
Dell Alienware 13 R3 Firmware: before 1.12.2 — fixed in 1.12.2
Dell Alienware 15 R2 Firmware: before 1.13.1 — fixed in 1.13.1
Dell Alienware 15 R3 Firmware: before 1.12.2 — fixed in 1.12.2
Dell Alienware 15 R4 Firmware: before 1.13.2 — fixed in 1.13.2
Dell Alienware 17 R3 Firmware: before 1.13.1 — fixed in 1.13.1
Dell Alienware 17 R4 Firmware: before 1.12.2 — fixed in 1.12.2
Dell Alienware 17 R5 Firmware: before 1.13.2 — fixed in 1.13.2
Dell Alienware Area 51M R1 Firmware: before 1.15.1 — fixed in 1.15.1
Dell Alienware Area 51M R2 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Alienware Aurora R11 Firmware: before 1.0.7 — fixed in 1.0.7
Dell Alienware Aurora R7 Firmware: before 1.0.24 — fixed in 1.0.24
Dell Alienware Aurora R8 Firmware: before 1.0.16 — fixed in 1.0.16
Dell Alienware Aurora R9 Firmware: before 1.0.13 — fixed in 1.0.13
Dell Alienware M15 R1 Firmware: before 2.8.0 — fixed in 2.8.0
Dell Alienware M15 R2 Firmware: before 1.8.1 — fixed in 1.8.1
Dell Alienware M15 R3 Firmware: before 1.9.1 — fixed in 1.9.1
Dell Alienware M15 R4 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Alienware M15 R6 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Alienware M17 R1 Firmware: before 2.8.0 — fixed in 2.8.0
Dell Alienware M17 R2 Firmware: before 1.8.1 — fixed in 1.8.1
Dell Alienware M17 R3 Firmware: before 1.9.1 — fixed in 1.9.1
Dell Alienware M17 R4 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Chengming 3977 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Chengming 3980 Firmware: before 2.18.0 — fixed in 2.18.0
Dell Chengming 3988 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Chengming 3990 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Chengming 3991 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Embedded Box Pc 5000 Firmware: before 1.10.2 — fixed in 1.10.2
Dell G15 5511 Firmware: before 1.5.0; 1.9.0 — fixed in 1.5.0

How to fix

Upgrade to a fixed version: Dell Alienware 13 R2 Firmware 1.13.1; Dell Alienware 13 R3 Firmware 1.12.2; Dell Alienware 15 R2 Firmware 1.13.1; Dell Alienware 15 R3 Firmware 1.12.2; Dell Alienware 15 R4 Firmware 1.13.2; Dell Alienware 17 R3 Firmware 1.13.1; Dell Alienware 17 R4 Firmware 1.12.2; Dell Alienware 17 R5 Firmware 1.13.2; Dell Alienware Area 51M R1 Firmware 1.15.1; Dell Alienware Area 51M R2 Firmware 1.8.0; Dell Alienware Aurora R11 Firmware 1.0.7; Dell Alienware Aurora R7 Firmware 1.0.24. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-24410 or the next vulnerability affects your stack