Read the docs
TI-2022-15301 Aliases CVE-2022-34403GHSA-f4vh-w8qv-cvrw

Stack-based buffer overflow in Dell CPG BIOS

Priority LOW 39CWE-121Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00166 5th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellCPG BIOSup to 2.15.2—No fix listedCNA
  • CPG BIOS VendorDell Affected up to 2.15.2 Fixed in — No fix listed CNA

CPE configurations NVD · 166

CPEVersionsRoleVendor
cpe:2.3:o:dell:alienware_m15_r6_firmware:*:*:*:*:*:*:*:*before 1.17.0VulnerableDell
cpe:2.3:h:dell:alienware_m15_r6:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:alienware_m15_r7_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:alienware_m15_r7:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:alienware_m15_ryzen_edition_r5_firmware:*:*:*:*:*:*:*:*before 1.8.0VulnerableDell
cpe:2.3:h:dell:alienware_m15_ryzen_edition_r5:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:alienware_m17_r5_amd_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:alienware_m17_r5_amd:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:g15_5510_firmware:*:*:*:*:*:*:*:*before 1.16.0VulnerableDell
cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
  • cpe:2.3:o:dell:alienware_m15_r6_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:alienware_m15_r6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:alienware_m15_r7_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:alienware_m15_r7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:alienware_m15_ryzen_edition_r5_firmware:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:alienware_m15_ryzen_edition_r5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:alienware_m17_r5_amd_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:alienware_m17_r5_amd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:g15_5510_firmware:*:*:*:*:*:*:*:* Versions before 1.16.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 156 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dell:g15_5511_firmware:*:*:*:*:*:*:*:*before 1.18.0VulnerableDell
cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:g15_5515_firmware:*:*:*:*:*:*:*:*before 1.8.0VulnerableDell
cpe:2.3:h:dell:g15_5515:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:g15_5525_firmware:*:*:*:*:*:*:*:*before 1.4.3VulnerableDell
cpe:2.3:h:dell:g15_5525:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:g5_se_5505_firmware:*:*:*:*:*:*:*:*before 1.13.0VulnerableDell
cpe:2.3:h:dell:g5_se_5505:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_14_5410_2-in-1_firmware:*:*:*:*:*:*:*:*before 2.15.2VulnerableDell
cpe:2.3:h:dell:inspiron_14_5410_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_15_3511_firmware:*:*:*:*:*:*:*:*before 1.18.2VulnerableDell
cpe:2.3:h:dell:inspiron_15_3511:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3195_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.6.0VulnerableDell
cpe:2.3:h:dell:inspiron_3195_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3275_firmware:*:*:*:*:*:*:*:*before 1.9.2VulnerableDell
cpe:2.3:h:dell:inspiron_3275:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3475_firmware:*:*:*:*:*:*:*:*before 1.9.2VulnerableDell
cpe:2.3:h:dell:inspiron_3475:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3505_firmware:*:*:*:*:*:*:*:*before 1.9.0VulnerableDell
cpe:2.3:h:dell:inspiron_3505:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3515_firmware:*:*:*:*:*:*:*:*before 1.9.0VulnerableDell
cpe:2.3:h:dell:inspiron_3515:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3525_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:inspiron_3525:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3585_firmware:*:*:*:*:*:*:*:*before 1.10.0VulnerableDell
cpe:2.3:h:dell:inspiron_3585:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3595_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:inspiron_3595:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3785_firmware:*:*:*:*:*:*:*:*before 1.10.0VulnerableDell
cpe:2.3:h:dell:inspiron_3785:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_3891_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_3891:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5310_firmware:*:*:*:*:*:*:*:*before 2.15.0VulnerableDell
cpe:2.3:h:dell:inspiron_5310:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5405_firmware:*:*:*:*:*:*:*:*before 1.9.0VulnerableDell
cpe:2.3:h:dell:inspiron_5405:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5410_firmware:*:*:*:*:*:*:*:*before 2.14.0VulnerableDell
cpe:2.3:h:dell:inspiron_5410:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5415_firmware:*:*:*:*:*:*:*:*before 1.13.0VulnerableDell
cpe:2.3:h:dell:inspiron_5415:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5425_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:inspiron_5425:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5485_firmware:*:*:*:*:*:*:*:*before 2.11.0VulnerableDell
cpe:2.3:h:dell:inspiron_5485:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5485_2-in-1_firmware:*:*:*:*:*:*:*:*before 2.11.0VulnerableDell
cpe:2.3:h:dell:inspiron_5485_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5505_firmware:*:*:*:*:*:*:*:*before 1.9.0VulnerableDell
cpe:2.3:h:dell:inspiron_5505:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5510_firmware:*:*:*:*:*:*:*:*before 2.15.2VulnerableDell
cpe:2.3:h:dell:inspiron_5510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5515_firmware:*:*:*:*:*:*:*:*before 1.13.0VulnerableDell
cpe:2.3:h:dell:inspiron_5515:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_5585_firmware:*:*:*:*:*:*:*:*before 2.11.0VulnerableDell
cpe:2.3:h:dell:inspiron_5585:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7405_2-in-1_firmware:*:*:*:*:*:*:*:*before 1.10.1VulnerableDell
cpe:2.3:h:dell:inspiron_7405_2-in-1:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7415_firmware:*:*:*:*:*:*:*:*before 1.13.0VulnerableDell
cpe:2.3:h:dell:inspiron_7415:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7425_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:inspiron_7425:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_3320_firmware:*:*:*:*:*:*:*:*before 1.18.2VulnerableDell
cpe:2.3:h:dell:latitude_3320:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:*before 1.23.2VulnerableDell
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:*before 1.23.2VulnerableDell
cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5320_firmware:*:*:*:*:*:*:*:*before 1.24.3VulnerableDell
cpe:2.3:h:dell:latitude_5320:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5420_firmware:*:*:*:*:*:*:*:*before 1.22.0VulnerableDell
cpe:2.3:h:dell:latitude_5420:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5520_firmware:*:*:*:*:*:*:*:*before 1.24.3VulnerableDell
cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5521_firmware:*:*:*:*:*:*:*:*before 1.17.3VulnerableDell
cpe:2.3:h:dell:latitude_5521:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7320_firmware:*:*:*:*:*:*:*:*before 1.20.0VulnerableDell
cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7320_detachable_firmware:*:*:*:*:*:*:*:*before 1.17.2VulnerableDell
cpe:2.3:h:dell:latitude_7320_detachable:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7420_firmware:*:*:*:*:*:*:*:*before 1.20.0VulnerableDell
cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_7520_firmware:*:*:*:*:*:*:*:*before 1.20.0VulnerableDell
cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_9420_firmware:*:*:*:*:*:*:*:*before 1.16.2VulnerableDell
cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_9520_firmware:*:*:*:*:*:*:*:*before 1.17.0VulnerableDell
cpe:2.3:h:dell:latitude_9520:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_rugged_5430_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:latitude_rugged_5430:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_rugged_7330_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:latitude_rugged_7330:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:latitude_5421_firmware:*:*:*:*:*:*:*:*before 1.15.0VulnerableDell
cpe:2.3:h:dell:latitude_5421:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_5090_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:optiplex_5090:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:*:*:*:*:*:*:*:*before 1.15.0VulnerableDell
cpe:2.3:h:dell:optiplex_5490_all-in-one:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_7090_tower_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:optiplex_7090_tower:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_7090_ultra_firmware:*:*:*:*:*:*:*:*before 1.15.0VulnerableDell
cpe:2.3:h:dell:optiplex_7090_ultra:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:optiplex_7090_aio_firmware:*:*:*:*:*:*:*:*before 1.15.0VulnerableDell
cpe:2.3:h:dell:optiplex_7090_aio:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3450_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:precision_3450:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3560_firmware:*:*:*:*:*:*:*:*before 1.24.3VulnerableDell
cpe:2.3:h:dell:precision_3560:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3561_firmware:*:*:*:*:*:*:*:*before 1.17.3VulnerableDell
cpe:2.3:h:dell:precision_3561:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_3650_tower_firmware:*:*:*:*:*:*:*:*before 1.16.0VulnerableDell
cpe:2.3:h:dell:precision_3650_tower:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_5560_firmware:*:*:*:*:*:*:*:*before 1.15.2VulnerableDell
cpe:2.3:h:dell:precision_5560:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:*before 1.15.2VulnerableDell
cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_7560_firmware:*:*:*:*:*:*:*:*before 1.16.0VulnerableDell
cpe:2.3:h:dell:precision_7560:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:precision_7760_firmware:*:*:*:*:*:*:*:*before 1.16.0VulnerableDell
cpe:2.3:h:dell:precision_7760:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3405_firmware:*:*:*:*:*:*:*:*before 1.9.0VulnerableDell
cpe:2.3:h:dell:vostro_3405:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3425_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:vostro_3425:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3510_firmware:*:*:*:*:*:*:*:*before 1.18.2VulnerableDell
cpe:2.3:h:dell:vostro_3510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3515_firmware:*:*:*:*:*:*:*:*before 1.9.0VulnerableDell
cpe:2.3:h:dell:vostro_3515:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3525_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:vostro_3525:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3690_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_3690:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_3890_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_3890:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5310_firmware:*:*:*:*:*:*:*:*before 2.15.0VulnerableDell
cpe:2.3:h:dell:vostro_5310:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5410_firmware:*:*:*:*:*:*:*:*before 2.15.2VulnerableDell
cpe:2.3:h:dell:vostro_5410:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5415_firmware:*:*:*:*:*:*:*:*before 1.13.0VulnerableDell
cpe:2.3:h:dell:vostro_5415:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5510_firmware:*:*:*:*:*:*:*:*before 2.15.2VulnerableDell
cpe:2.3:h:dell:vostro_5510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5515_firmware:*:*:*:*:*:*:*:*before 1.13.0VulnerableDell
cpe:2.3:h:dell:vostro_5515:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5625_firmware:*:*:*:*:*:*:*:*before 1.5.0VulnerableDell
cpe:2.3:h:dell:vostro_5625:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_5890_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_5890:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:*before 1.12.0VulnerableDell
cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_15_9510_firmware:*:*:*:*:*:*:*:*before 1.15.2VulnerableDell
cpe:2.3:h:dell:xps_15_9510:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:*before 1.15.2VulnerableDell
cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
  • cpe:2.3:o:dell:g15_5511_firmware:*:*:*:*:*:*:*:* Versions before 1.18.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:g15_5515_firmware:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:g15_5515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:g15_5525_firmware:*:*:*:*:*:*:*:* Versions before 1.4.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:g15_5525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:g5_se_5505_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:g5_se_5505:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_14_5410_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 2.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_14_5410_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_15_3511_firmware:*:*:*:*:*:*:*:* Versions before 1.18.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_15_3511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3195_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.6.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3195_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3275_firmware:*:*:*:*:*:*:*:* Versions before 1.9.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3275:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3475_firmware:*:*:*:*:*:*:*:* Versions before 1.9.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3475:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3505_firmware:*:*:*:*:*:*:*:* Versions before 1.9.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3505:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3515_firmware:*:*:*:*:*:*:*:* Versions before 1.9.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3525_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3585_firmware:*:*:*:*:*:*:*:* Versions before 1.10.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3585:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3595_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3595:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3785_firmware:*:*:*:*:*:*:*:* Versions before 1.10.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3785:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_3891_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_3891:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5310_firmware:*:*:*:*:*:*:*:* Versions before 2.15.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5405_firmware:*:*:*:*:*:*:*:* Versions before 1.9.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5410_firmware:*:*:*:*:*:*:*:* Versions before 2.14.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5415_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5415:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5425_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5425:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5485_firmware:*:*:*:*:*:*:*:* Versions before 2.11.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5485:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5485_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 2.11.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5485_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5505_firmware:*:*:*:*:*:*:*:* Versions before 1.9.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5505:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5510_firmware:*:*:*:*:*:*:*:* Versions before 2.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5515_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_5585_firmware:*:*:*:*:*:*:*:* Versions before 2.11.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_5585:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7405_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7405_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7415_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7415:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7425_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7425:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_3320_firmware:*:*:*:*:*:*:*:* Versions before 1.18.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_3320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:* Versions before 1.23.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:* Versions before 1.23.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5320_firmware:*:*:*:*:*:*:*:* Versions before 1.24.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5420_firmware:*:*:*:*:*:*:*:* Versions before 1.22.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5520_firmware:*:*:*:*:*:*:*:* Versions before 1.24.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5521_firmware:*:*:*:*:*:*:*:* Versions before 1.17.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7320_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7320_detachable_firmware:*:*:*:*:*:*:*:* Versions before 1.17.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7320_detachable:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7420_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_7520_firmware:*:*:*:*:*:*:*:* Versions before 1.20.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_9420_firmware:*:*:*:*:*:*:*:* Versions before 1.16.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_9520_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_9520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_rugged_5430_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_rugged_5430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_rugged_7330_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_rugged_7330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:latitude_5421_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:latitude_5421:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_5090_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_5090:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_5490_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_7090_tower_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_7090_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_7090_ultra_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_7090_ultra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:optiplex_7090_aio_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:optiplex_7090_aio:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3450_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3560_firmware:*:*:*:*:*:*:*:* Versions before 1.24.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3561_firmware:*:*:*:*:*:*:*:* Versions before 1.17.3 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3561:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_3650_tower_firmware:*:*:*:*:*:*:*:* Versions before 1.16.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_3650_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_5560_firmware:*:*:*:*:*:*:*:* Versions before 1.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_5560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:* Versions before 1.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_7560_firmware:*:*:*:*:*:*:*:* Versions before 1.16.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_7560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:precision_7760_firmware:*:*:*:*:*:*:*:* Versions before 1.16.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:precision_7760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3405_firmware:*:*:*:*:*:*:*:* Versions before 1.9.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3425_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3425:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3510_firmware:*:*:*:*:*:*:*:* Versions before 1.18.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3515_firmware:*:*:*:*:*:*:*:* Versions before 1.9.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3525_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3690_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3690:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_3890_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_3890:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5310_firmware:*:*:*:*:*:*:*:* Versions before 2.15.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5410_firmware:*:*:*:*:*:*:*:* Versions before 2.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5415_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5415:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5510_firmware:*:*:*:*:*:*:*:* Versions before 2.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5515_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5625_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5625:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_5890_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_5890:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:* Versions before 1.12.0 Vulnerable ·Dell
  • cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_15_9510_firmware:*:*:*:*:*:*:*:* Versions before 1.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_15_9510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:* Versions before 1.15.2 Vulnerable ·Dell
  • cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-34403
  2. 2026-10-03 Alias added: GHSA-f4vh-w8qv-cvrw

References

  • TI-2024-35208 Weak authentication in Dell Client Platform BIOS CVSS 3.1HIGH 8.2
  • TI-2022-10105 Dell BIOS versions contain an Insecure Automated Optimization vulnerability. CVSS 3.1HIGH 7.9
  • TI-2022-10104 Stack-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.8
  • TI-2023-23082 Link following in Dell Client Platform, Dell Dock Firmware CVSS 3.1HIGH 7.3
  • TI-2022-15298 Heap-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.1
  • TI-2022-10102 Improper authentication in Dell CPG BIOS CVSS 3.1HIGH 7.8
See all 47 →

Sources