Memory corruption in Dell CPG BIOS
Priority LOW 35CWE-119Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
Why it matters now
EPSS 0.00292 21st percentileScored 2026-11-07
Fix Fixed CPG BIOS (Dell): 1.16
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | CPG BIOS | before 1.16 | 1.16 | Patch available | CNA |
- CPG BIOS VendorDell Affected before 1.16 Fixed in 1.16 Patch available CNA
CPE configurations NVD · 92
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:alienware_13_r3_firmware:*:*:*:*:*:*:*:* | before 1.16.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_13_r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_15_r3_firmware:*:*:*:*:*:*:*:* | before 1.16.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_15_r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_15_r4_firmware:*:*:*:*:*:*:*:* | before 1.17.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_15_r4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_17_r4_firmware:*:*:*:*:*:*:*:* | before 1.16.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_17_r4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_17_r5_firmware:*:*:*:*:*:*:*:* | before 1.17.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_17_r5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:alienware_13_r3_firmware:*:*:*:*:*:*:*:* Versions before 1.16.1 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_13_r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_15_r3_firmware:*:*:*:*:*:*:*:* Versions before 1.16.1 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_15_r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_15_r4_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_15_r4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_17_r4_firmware:*:*:*:*:*:*:*:* Versions before 1.16.1 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_17_r4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_17_r5_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_17_r5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 82 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:alienware_area_51m_r1_firmware:*:*:*:*:*:*:*:* | before 1.18.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_area_51m_r1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_area_51m_r2_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_area_51m_r2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_aurora_r8_firmware:*:*:*:*:*:*:*:* | before 1.0.20 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_aurora_r8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_m15_r2_firmware:*:*:*:*:*:*:*:* | before 1.12.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m15_r2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_m15_r3_firmware:*:*:*:*:*:*:*:* | before 1.14.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m15_r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_m15_r4_firmware:*:*:*:*:*:*:*:* | before 1.8.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m15_r4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_m17_r2_firmware:*:*:*:*:*:*:*:* | before 1.12.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m17_r2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_m17_r3_firmware:*:*:*:*:*:*:*:* | before 1.14.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m17_r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_m17_r4_firmware:*:*:*:*:*:*:*:* | before 1.8.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m17_r4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_x15_r1_firmware:*:*:*:*:*:*:*:* | before 1.7.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_x15_r1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_x17_r1_firmware:*:*:*:*:*:*:*:* | before 1.7.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_x17_r1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:* | before 1.7.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:edge_gateway_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:* | before 1.17.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:edge_gateway_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:edge_gateway_5100_firmware:*:*:*:*:*:*:*:* | before 1.17.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:edge_gateway_5100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:* | before 1.14.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_14_3473_firmware:*:*:*:*:*:*:*:* | before 1.14.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_14_3473:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_15_3573_firmware:*:*:*:*:*:*:*:* | before 1.14.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_15_3573:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_15_5566_firmware:*:*:*:*:*:*:*:* | before 1.18.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_15_5566:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3277_firmware:*:*:*:*:*:*:*:* | before 1.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3277:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3465_firmware:*:*:*:*:*:*:*:* | before 1.12.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3465:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3477_firmware:*:*:*:*:*:*:*:* | before 1.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3477:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3482_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3482:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3502_firmware:*:*:*:*:*:*:*:* | before 1.7.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3502:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3510_firmware:*:*:*:*:*:*:*:* | before 1.6.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3565_firmware:*:*:*:*:*:*:*:* | before 1.12.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3565:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3582_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3582:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3782_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3782:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3379_firmware:*:*:*:*:*:*:*:* | before 1.0.34 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3379:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_14_5468_firmware:*:*:*:*:*:*:*:* | before 1.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_14_5468:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_15_5568_firmware:*:*:*:*:*:*:*:* | before 1.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_15_5568:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3267_firmware:*:*:*:*:*:*:*:* | before 1.20.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3267:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3268_firmware:*:*:*:*:*:*:*:* | before 1.20.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3268:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3572_firmware:*:*:*:*:*:*:*:* | before 1.14.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3572:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3582_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3582:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3660_firmware:*:*:*:*:*:*:*:* | before 1.20.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3660:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3667_firmware:*:*:*:*:*:*:*:* | before 1.20.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3667:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3668_firmware:*:*:*:*:*:*:*:* | before 1.20.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3668:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3669_firmware:*:*:*:*:*:*:*:* | before 1.20.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3669:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:* | before 1.15.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xps_8930_firmware:*:*:*:*:*:*:*:* | before 1.1.21 | Vulnerable | Dell |
| cpe:2.3:h:dell:xps_8930:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:alienware_area_51m_r1_firmware:*:*:*:*:*:*:*:* Versions before 1.18.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_area_51m_r1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_area_51m_r2_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_area_51m_r2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_aurora_r8_firmware:*:*:*:*:*:*:*:* Versions before 1.0.20 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_aurora_r8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_m15_r2_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m15_r2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_m15_r3_firmware:*:*:*:*:*:*:*:* Versions before 1.14.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m15_r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_m15_r4_firmware:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m15_r4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_m17_r2_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m17_r2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_m17_r3_firmware:*:*:*:*:*:*:*:* Versions before 1.14.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m17_r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_m17_r4_firmware:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m17_r4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_x15_r1_firmware:*:*:*:*:*:*:*:* Versions before 1.7.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_x15_r1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_x17_r1_firmware:*:*:*:*:*:*:*:* Versions before 1.7.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_x17_r1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:* Versions before 1.7.0 Vulnerable ·Dell
- cpe:2.3:h:dell:edge_gateway_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
- cpe:2.3:h:dell:edge_gateway_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:edge_gateway_5100_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
- cpe:2.3:h:dell:edge_gateway_5100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:* Versions before 1.14.0 Vulnerable ·Dell
- cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_14_3473_firmware:*:*:*:*:*:*:*:* Versions before 1.14.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_14_3473:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_15_3573_firmware:*:*:*:*:*:*:*:* Versions before 1.14.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_15_3573:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_15_5566_firmware:*:*:*:*:*:*:*:* Versions before 1.18.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_15_5566:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3277_firmware:*:*:*:*:*:*:*:* Versions before 1.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3277:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3465_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3465:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3477_firmware:*:*:*:*:*:*:*:* Versions before 1.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3477:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3482_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3482:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3502_firmware:*:*:*:*:*:*:*:* Versions before 1.7.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3502:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3510_firmware:*:*:*:*:*:*:*:* Versions before 1.6.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3565_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3565:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3582_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3582:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3782_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3782:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3379_firmware:*:*:*:*:*:*:*:* Versions before 1.0.34 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3379:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_14_5468_firmware:*:*:*:*:*:*:*:* Versions before 1.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_14_5468:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_15_5568_firmware:*:*:*:*:*:*:*:* Versions before 1.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_15_5568:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3267_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3267:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3268_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3268:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3572_firmware:*:*:*:*:*:*:*:* Versions before 1.14.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3572:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3582_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3582:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3660_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3660:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3667_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3667:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3668_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3668:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3669_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3669:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
- cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xps_8930_firmware:*:*:*:*:*:*:*:* Versions before 1.1.21 Vulnerable ·Dell
- cpe:2.3:h:dell:xps_8930:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA CPG BIOS (Dell) Fixed in 1.16
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Dell CPG BIOS 1.16
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2022-08297 Memory corruption in Dell CPG BIOSPriority LOW 35
- TI-2022-08296 Memory corruption in Dell CPG BIOSPriority LOW 35
- TI-2022-08292 Memory corruption in Dell CPG BIOSPriority LOW 35
Timeline
- 2026-10-02 Threatist record created from CVE-2022-24419
- 2026-10-03 Alias added: GHSA-5vqh-8cmq-gmwm
References
More Dell Alienware 13 R3 Firmware vulnerabilities
- TI-2022-08297 Memory corruption in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-08296 Memory corruption in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-08292 Memory corruption in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-08291 Memory corruption in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2021-14689 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 7.5
- TI-2021-14688 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 7.5
Sources
- CVE-2022-24419 · CVE Program
- CVE-2022-24419 · NVD
- FIRST EPSS
- GHSA-5vqh-8cmq-gmwm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences