High severity8.2NVD Advisory· Published Mar 11, 2022· Updated Jun 17, 2026
CVE-2022-24416
CVE-2022-24416
Description
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
48- cpe:2.3:o:dell:alienware_area_51m_r1_firmware:*:*:*:*:*:*:*:*Range: <1.18.0
- cpe:2.3:o:dell:alienware_area_51m_r2_firmware:*:*:*:*:*:*:*:*Range: <1.13.0
- cpe:2.3:o:dell:alienware_aurora_r8_firmware:*:*:*:*:*:*:*:*Range: <1.0.20
- cpe:2.3:o:dell:alienware_m15_r2_firmware:*:*:*:*:*:*:*:*Range: <1.12.0
- cpe:2.3:o:dell:alienware_m15_r3_firmware:*:*:*:*:*:*:*:*Range: <1.14.0
- cpe:2.3:o:dell:alienware_m17_r2_firmware:*:*:*:*:*:*:*:*Range: <1.12.0
- cpe:2.3:o:dell:alienware_m17_r3_firmware:*:*:*:*:*:*:*:*Range: <1.14.0
- cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:*Range: <1.7.0
- cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:*Range: <1.17.0
- cpe:2.3:o:dell:edge_gateway_5100_firmware:*:*:*:*:*:*:*:*Range: <1.17.0
- cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:*Range: <1.13.0
- cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:*Range: <1.14.0
- cpe:2.3:o:dell:inspiron_14_3473_firmware:*:*:*:*:*:*:*:*Range: <1.14.0
- cpe:2.3:o:dell:inspiron_15_3573_firmware:*:*:*:*:*:*:*:*Range: <1.14.0
- cpe:2.3:o:dell:inspiron_15_5566_firmware:*:*:*:*:*:*:*:*Range: <1.18.0
- cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:*Range: <1.15.0
Patches
Vulnerability mechanics
References
1- www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053nvdVendor Advisory
News mentions
0No linked articles in our index yet.