CVE-2022-32482

Severity: medium (CVSS 5.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-01 · updated 2026-06-17
Weakness: CWE-20

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

Affected products

Dell Alienware M15 R6 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware M15 R7 Firmware: before 1.10.0 — fixed in 1.10.0
Dell Chengming 3900 Firmware: before 1.7.3 — fixed in 1.7.3
Dell G15 5510 Firmware: before 1.16.0 — fixed in 1.16.0
Dell G15 5511 Firmware: before 1.18.0 — fixed in 1.18.0
Dell G15 5520 Firmware: before 1.10.0 — fixed in 1.10.0
Dell G16 7620 Firmware: before 1.12.0 — fixed in 1.12.0
Dell G3 3500 Firmware: before 1.20.0 — fixed in 1.20.0
Dell G5 15 5500 Firmware: before 1.20.0 — fixed in 1.20.0
Dell G7 15 7500 Firmware: before 1.19.0 — fixed in 1.19.0
Dell G7 17 7700 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 14 5410 2-In-1 Firmware: before 2.15.2 — fixed in 2.15.2
Dell Inspiron 14 Plus 7420 Firmware: before 1.6.1 — fixed in 1.6.1
Dell Inspiron 15 3511 Firmware: before 1.18.2 — fixed in 1.18.2
Dell Inspiron 16 Plus 7620 Firmware: before 1.6.1 — fixed in 1.6.1
Dell Inspiron 3490 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Inspiron 3493 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Inspiron 3501 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3511 Firmware: before 1.18.2 — fixed in 1.18.2
Dell Inspiron 3520 Firmware: before 1.8.2 — fixed in 1.8.2
Dell Inspiron 3590 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Inspiron 3593 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Inspiron 3790 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Inspiron 3793 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Inspiron 3891 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 3910 Firmware: before 1.7.3 — fixed in 1.7.3
Dell Inspiron 5300 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Inspiron 5301 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Inspiron 5310 Firmware: before 2.15.0 — fixed in 2.15.0
Dell Inspiron 5320 Firmware: before 1.3.0 — fixed in 1.3.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 R6 Firmware 1.17.0; Dell Alienware M15 R7 Firmware 1.10.0; Dell Chengming 3900 Firmware 1.7.3; Dell G15 5510 Firmware 1.16.0; Dell G15 5511 Firmware 1.18.0; Dell G15 5520 Firmware 1.10.0; Dell G16 7620 Firmware 1.12.0; Dell G3 3500 Firmware 1.20.0; Dell G5 15 5500 Firmware 1.20.0; Dell G7 15 7500 Firmware 1.19.0; Dell G7 17 7700 Firmware 1.19.0; Dell Inspiron 14 5410 2-In-1 Firmware 2.15.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-32482 or the next vulnerability affects your stack