CVE-2022-24421

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-11 · updated 2026-06-17
Weakness: CWE-119

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Affected products

Dell Alienware 13 R3 Firmware: before 1.16.1 — fixed in 1.16.1
Dell Alienware 15 R3 Firmware: before 1.16.1 — fixed in 1.16.1
Dell Alienware 15 R4 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware 17 R4 Firmware: before 1.16.1 — fixed in 1.16.1
Dell Alienware 17 R5 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware Area 51M R1 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Alienware Area 51M R2 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware Aurora R8 Firmware: before 1.0.20 — fixed in 1.0.20
Dell Alienware M15 R2 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Alienware M15 R3 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware M15 R4 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Alienware M17 R2 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Alienware M17 R3 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware M17 R4 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Alienware X15 R1 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Alienware X17 R1 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Edge Gateway 3000 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Edge Gateway 5000 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Edge Gateway 5100 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Embedded Box PC 3000 , CPG BIOS: before 1.13.0 — fixed in 1.13.0
Dell Embedded Box Pc 5000 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 14 3473 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 15 3573 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 15 5566 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Inspiron 3277 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3465 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 3477 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3482 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Inspiron 3502 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Inspiron 3510 Firmware: before 1.6.0 — fixed in 1.6.0

How to fix

Upgrade to a fixed version: Dell Alienware 13 R3 Firmware 1.16.1; Dell Alienware 15 R3 Firmware 1.16.1; Dell Alienware 15 R4 Firmware 1.17.0; Dell Alienware 17 R4 Firmware 1.16.1; Dell Alienware 17 R5 Firmware 1.17.0; Dell Alienware Area 51M R1 Firmware 1.18.0; Dell Alienware Area 51M R2 Firmware 1.13.0; Dell Alienware Aurora R8 Firmware 1.0.20; Dell Alienware M15 R2 Firmware 1.12.0; Dell Alienware M15 R3 Firmware 1.14.0; Dell Alienware M15 R4 Firmware 1.8.0; Dell Alienware M17 R2 Firmware 1.12.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-24421 or the next vulnerability affects your stack