Improper input validation in Dell CPG BIOS
Priority LOW 34CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00209 11th percentileScored 2026-11-07
Fix Fixed CPG BIOS (Dell): 2.36.0, 1.18.0, 1.46.0 +7
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | CPG BIOS | N/A to before 2.36.0; N/A to before 1.18.0; N/A to before 1.46.0; N/A to before 1.27.0; N/A to before 1.29.0; N/A to before 1.28.0; N/A to before 1.31.0; N/A to before 1.32.0; N/A to before 1.50.0; N/A to before 2.30.0 | 2.36.0, 1.18.0, 1.46.0, 1.27.0, 1.29.0, 1.28.0, 1.31.0, 1.32.0, 1.50.0, 2.30.0 | Patch available | CNA |
- CPG BIOS VendorDell Affected N/A to before 2.36.0; N/A to before 1.18.0; N/A to before 1.46.0; N/A to before 1.27.0; N/A to before 1.29.0; N/A to before 1.28.0; N/A to before 1.31.0; N/A to before 1.32.0; N/A to before 1.50.0; N/A to before 2.30.0 Fixed in 2.36.0, 1.18.0, 1.46.0, 1.27.0, 1.29.0, 1.28.0, 1.31.0, 1.32.0, 1.50.0, 2.30.0 Patch available CNA
CPE configurations NVD · 100
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:edge_gateway_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5820_tower_firmware:*:*:*:*:*:*:*:* | before 2.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5820_tower:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:* | before 1.18.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:edge_gateway_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:* | before 1.24.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:* | before 1.25.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:edge_gateway_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5820_tower_firmware:*:*:*:*:*:*:*:* Versions before 2.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5820_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:* Versions before 1.18.0 Vulnerable ·Dell
- cpe:2.3:h:dell:edge_gateway_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:* Versions before 1.24.0 Vulnerable ·Dell
- cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:* Versions before 1.25.0 Vulnerable ·Dell
- cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 90 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:latitude_12_rugged_extreme_7214_firmware:*:*:*:*:*:*:*:* | before 1.46.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_12_rugged_extreme_7214:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_13_3380_firmware:*:*:*:*:*:*:*:* | before 1.27.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_13_3380:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3180_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3180:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3189_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3189:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3190_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3190:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3190_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3300_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3390_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3390_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5280_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5280:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5288_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5288:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5290_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5290:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5290_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5414_rugged_firmware:*:*:*:*:*:*:*:* | before 1.46.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5414_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5420_rugged_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5420_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5424_rugged_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5424_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5480_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5488_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5488:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5490_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5490:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5580_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5590_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5590:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7212_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* | before 1.50.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7212_rugged_extreme_tablet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7280_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7280:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7285_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.26.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7285_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7290_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7290:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7380_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7380:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7390_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7390:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7390_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7390_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7414_rugged_firmware:*:*:*:*:*:*:*:* | before 1.46.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7414_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7424_rugged_extreme:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7480_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7490_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7490:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_3050_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_3050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_3050_all-in-one_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_3050_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_5050_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_5050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_7450_all-in-one_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_7450_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3420_tower_firmware:*:*:*:*:*:*:*:* | before 2.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3420_tower:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3520_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3620_tower_firmware:*:*:*:*:*:*:*:* | before 2.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3620_tower:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5520_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5530_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.31.8 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5530_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7520_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7720_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:wyse_5070_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:wyse_5070:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:* | before 1.25.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:latitude_12_rugged_extreme_7214_firmware:*:*:*:*:*:*:*:* Versions before 1.46.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_12_rugged_extreme_7214:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_13_3380_firmware:*:*:*:*:*:*:*:* Versions before 1.27.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_13_3380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3180_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3180:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3189_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3189:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3190_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3190:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3190_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3300_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3390_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3390_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5280_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5288_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5288:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5290_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5290:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5290_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5414_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.46.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5414_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5420_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5420_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5424_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5424_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5480_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5488_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5488:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5490_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5580_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5590_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7212_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* Versions before 1.50.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7212_rugged_extreme_tablet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7280_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7285_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.26.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7285_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7290_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7290:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7380_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7390_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7390:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7390_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7390_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7414_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.46.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7414_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7424_rugged_extreme:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7480_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7490_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_3050_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_3050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_3050_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_3050_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_5050_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_5050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_7450_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_7450_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3420_tower_firmware:*:*:*:*:*:*:*:* Versions before 2.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3420_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3520_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3620_tower_firmware:*:*:*:*:*:*:*:* Versions before 2.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3620_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5520_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5530_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.31.8 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5530_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7520_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7720_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:wyse_5070_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:wyse_5070:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:* Versions before 1.25.0 Vulnerable ·Dell
- cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA CPG BIOS (Dell) Fixed in 2.36.0, 1.18.0, 1.46.0, 1.27.0, 1.29.0, 1.28.0, 1.31.0, 1.32.0, 1.50.0, 2.30.0
Timeline
- 2026-10-02 Threatist record created from CVE-2024-22429
- 2026-10-03 Alias added: GHSA-vmrr-46g9-357m
References
More Dell Edge Gateway 3000 Firmware vulnerabilities
- TI-2022-14131 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-14130 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-10105 Dell BIOS versions contain an Insecure Automated Optimization vulnerability. CVSS 3.1HIGH 7.9
- TI-2022-14135 Stack-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.8
- TI-2022-14132 Improper input validation in Dell BIOS CVSS 3.1HIGH 7.8
- TI-2022-14129 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 7.8
Sources
- CVE-2024-22429 · CVE Program
- CVE-2024-22429 · NVD
- FIRST EPSS
- GHSA-vmrr-46g9-357m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences