CVE-2022-32489

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-12 · updated 2026-06-17
Weakness: CWE-20

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected products

Dell Alienware Area 51M R1 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Alienware Area 51M R2 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Alienware Aurora R10 Firmware: before 2.3.1 — fixed in 2.3.1
Dell Alienware Aurora R11 Firmware: before 1.0.16 — fixed in 1.0.16
Dell Alienware Aurora R12 Firmware: before 1.1.16 — fixed in 1.1.16
Dell Alienware Aurora R13 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Alienware Aurora R8 Firmware: before 1.0.23 — fixed in 1.0.23
Dell Alienware Aurora R9 Firmware: before 1.0.20 — fixed in 1.0.20
Dell Alienware M15 R1 Firmware: before 2.14.0 — fixed in 2.14.0
Dell Alienware M15 R2 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware M15 R3 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Alienware M15 R4 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware M17 R1 Firmware: before 2.14.0 — fixed in 2.14.0
Dell Alienware M17 R2 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware M17 R3 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Alienware M17 R4 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware X14 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Alienware X15 R1 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Alienware X15 R2 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Alienware X17 R1 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Alienware X17 R2 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Chengming 3980 Firmware: before 2.24.0 — fixed in 2.24.0
Dell Chengming 3988 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Chengming 3990 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Chengming 3991 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Edge Gateway 3000 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Edge Gateway 5000 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Embedded Box PC 3000 , CPG BIOS: before 1.15.0 — fixed in 1.15.0
Dell Embedded Box Pc 5000 Firmware: before 1.16.0 — fixed in 1.16.0
Dell G3 15 3590 Firmware: before 1.18.0 — fixed in 1.18.0

How to fix

Upgrade to a fixed version: Dell Alienware Area 51M R1 Firmware 1.21.0; Dell Alienware Area 51M R2 Firmware 1.18.0; Dell Alienware Aurora R10 Firmware 2.3.1; Dell Alienware Aurora R11 Firmware 1.0.16; Dell Alienware Aurora R12 Firmware 1.1.16; Dell Alienware Aurora R13 Firmware 1.5.0; Dell Alienware Aurora R8 Firmware 1.0.23; Dell Alienware Aurora R9 Firmware 1.0.20; Dell Alienware M15 R1 Firmware 2.14.0; Dell Alienware M15 R2 Firmware 1.17.0; Dell Alienware M15 R3 Firmware 1.19.0; Dell Alienware M15 R4 Firmware 1.13.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-32489 or the next vulnerability affects your stack