Vulnerabilities

TI-2022-14135 CVE-2022-32493 · GHSA-pp39-mm75-97q9

Stack-based buffer overflow in Dell CPG BIOS

LOW 35

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00207 Published 2022-10-12 Fixed in XPS 8940 BIOS (version: 2.5.1) CWE-121

TI-2022-14133 CVE-2022-32491 · GHSA-6cxg-pg3j-vj4c

Memory corruption in Dell CPG BIOS

LOW 33

Dell Client BIOS contains a Buffer Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00167 Published 2022-10-12 Fixed in OptiPlex 7770 All-In-One BIOS (version: 1.14.0) CWE-119

TI-2022-14131 CVE-2022-32489 · GHSA-rcg8-vrhv-wf25

Improper input validation in Dell CPG BIOS

LOW 37

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00252 Published 2022-10-12 Fixed in OptiPlex 7770 All-In-One BIOS CWE-20

TI-2022-14130 CVE-2022-32488 · GHSA-2gxq-wj64-6pw6

Improper input validation in Dell CPG BIOS

LOW 37

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00252 Published 2022-10-12 Fixed in OptiPlex 7770 All-In-One BIOS CWE-20

TI-2022-14129 CVE-2022-32487 · GHSA-xxmg-7fww-jq8p

Improper input validation in Dell CPG BIOS

LOW 35

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00225 Published 2022-10-12 Fixed in 2.3 CWE-20

TI-2022-14127 CVE-2022-32485 · GHSA-9wgv-97mj-xqwh

Improper input validation in Dell CPG BIOS

LOW 35

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00225 Published 2022-10-12 Fixed in 2.3 CWE-20

TI-2022-14126 CVE-2022-32484 · GHSA-5gjf-x6hp-966f

Improper input validation in Dell CPG BIOS

LOW 24

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1MEDIUM 5.6 Local High privileges No interaction EPSS 0.00175 Published 2022-10-12 Fixed in 2.3 CWE-20

TI-2022-14125 CVE-2022-32483 · GHSA-rv2m-pgxx-f3xq

Improper input validation in Dell CPG BIOS

LOW 24

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1MEDIUM 5.6 Local High privileges No interaction EPSS 0.00175 Published 2022-10-12 Fixed in 2.3.1 CWE-20

TI-2022-10105 CVE-2022-26861 · GHSA-cp2w-v57g-8xxw

Dell BIOS versions contain an Insecure Automated Optimization vulnerability.

LOW 36

Dell BIOS versions contain an Insecure Automated Optimization vulnerability.

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00223 Published 2022-09-06 Fixed in Gen7, Gen8 +4 CWE-1038

TI-2022-10104 CVE-2022-26860 · GHSA-qxc9-cxmm-778r

Stack-based buffer overflow in Dell CPG BIOS

LOW 35

Dell BIOS versions contain a stack-based buffer overflow vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00195 Published 2022-09-06 Fixed in All CWE-121

TI-2022-10103 CVE-2022-26859 · GHSA-m639-pxcj-g467

Time-of-check time-of-use race condition in Dell CPG BIOS

LOW 30

Dell BIOS contains a race condition vulnerability.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00135 Published 2022-09-06 Fixed in All CWE-367

TI-2022-10102 CVE-2022-26858 · GHSA-r95r-f5pv-5rr9

Improper authentication in Dell CPG BIOS

LOW 33

Dell BIOS versions contain an Improper Authentication vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00173 Published 2022-09-06 Fixed in All CWE-287

TI-2021-14689 CVE-2021-36325 · GHSA-fc73-qghx-jq85

Improper input validation in Dell CPG BIOS

LOW 34

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00241 Published 2021-11-12 Fixed in 1.13.0 CWE-20

TI-2021-14688 CVE-2021-36324 · GHSA-v34w-vx47-xgh3

Improper input validation in Dell CPG BIOS

LOW 34

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00241 Published 2021-11-12 Fixed in 1.13.0 CWE-20

TI-2021-14687 CVE-2021-36323 · GHSA-xpv8-fw7f-p7c6

Improper input validation in Dell CPG BIOS

LOW 34

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00241 Published 2021-11-12 Fixed in 1.13.0 CWE-20

TI-2021-04609 CVE-2021-21522 · GHSA-pg87-v27x-wx62

Credentials management flaw in Dell CPG BIOS

LOW 35

Dell BIOS contains a Credentials Management issue.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00234 Published 2021-09-28 Fixed in 1.13.0 CWE-255

TI-2020-04434 CVE-2020-5387 · GHSA-jc6m-9rhv-q9wq

Improper handling of exceptional conditions in Dell CPG BIOS

LOW 20

Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00298 Published 2020-10-01 Fixed in 1.13.1 CWE-755

TI-2020-04413 CVE-2020-5362 · GHSA-xgch-xjh8-4m78

Improper authorization in Dell Client Consumer and Commercial platforms

LOW 31

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges…

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0029 Published 2020-06-10 No fix listed CWE-285

Vulnerabilities

Filters