CVSS: 6.7EPSS: 0%CPEs: 876EXPL: 0CVE-2023-28052
https://notcve.org/view.php?id=CVE-2023-28052
23 Jun 2023 — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. • https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabilities • CWE-20: Improper Input Validation •
CVSS: 6.7EPSS: 0%CPEs: 876EXPL: 0CVE-2023-25936
https://notcve.org/view.php?id=CVE-2023-25936
23 Jun 2023 — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. • https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabilities • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 0%CPEs: 316EXPL: 0CVE-2022-24410
https://notcve.org/view.php?id=CVE-2022-24410
10 Feb 2023 — Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces. • https://www.dell.com/support/kbdoc/en-us/000205719/dsa-2022-325 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 8.8EPSS: 0%CPEs: 166EXPL: 0CVE-2022-34403
https://notcve.org/view.php?id=CVE-2022-34403
01 Feb 2023 — Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM. • https://www.dell.com/support/kbdoc/000205716 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 5.6EPSS: 0%CPEs: 378EXPL: 0CVE-2022-32482
https://notcve.org/view.php?id=CVE-2022-32482
01 Feb 2023 — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable. • https://www.dell.com/support/kbdoc/en-us/000205717/dsa-2022-326 • CWE-20: Improper Input Validation •
CVSS: 7.1EPSS: 0%CPEs: 166EXPL: 0CVE-2022-34400
https://notcve.org/view.php?id=CVE-2022-34400
01 Feb 2023 — Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM. • https://www.dell.com/support/kbdoc/en-us/000205716/dsa-2022-327 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 602EXPL: 0CVE-2021-36325
https://notcve.org/view.php?id=CVE-2021-36325
12 Nov 2021 — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Dell BIOS contiene una vulnerabilidad de comprobación de entrada inapropiada. Un usuario malicioso autenticado localmente puede explotar potencialmente esta vulnerabilidad utilizando un SMI para conseguir una ejecución de código arbitrario en la SMRAM • https://www.dell.com/support/kbdoc/en-us/000192967 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 602EXPL: 0CVE-2021-36324
https://notcve.org/view.php?id=CVE-2021-36324
12 Nov 2021 — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Dell BIOS contiene una vulnerabilidad de comprobación de entrada inapropiada. Un usuario malicioso autenticado localmente puede explotar potencialmente esta vulnerabilidad utilizando una SMI para conseguir una ejecución de código arbitrario en la SMRAM • https://www.dell.com/support/kbdoc/en-us/000192967 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 602EXPL: 0CVE-2021-36323
https://notcve.org/view.php?id=CVE-2021-36323
12 Nov 2021 — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Dell BIOS contiene una vulnerabilidad de comprobación de entrada inapropiada. Un usuario malicioso autenticado localmente puede explotar potencialmente esta vulnerabilidad al usar una SMI para conseguir una ejecución de código arbitrario en la SMRAM • https://www.dell.com/support/kbdoc/en-us/000192967 • CWE-20: Improper Input Validation •