Threat Investigation
Request a demo

CVE-2022-24421

High

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

SeverityHigh
CVSS8.2
Exploit probability—
ProductDell Alienware 13 R3 Firmware
PublishedMar 11, 2022
First seenMar 11, 2022
Weakness typeCWE-119Memory buffer bounds error

How to fix

Update
  • dell alienware_13_r3_firmware1.16.1 or later
  • dell alienware_15_r3_firmware1.16.1 or later
  • dell alienware_15_r4_firmware1.17.0 or later
  • dell alienware_17_r4_firmware1.16.1 or later
  • dell alienware_17_r5_firmware1.17.0 or later
  • dell alienware_area_51m_r1_firmware1.18.0 or later
  • dell alienware_area_51m_r2_firmware1.13.0 or later
  • dell alienware_aurora_r8_firmware1.0.20 or later
  • dell alienware_m15_r2_firmware1.12.0 or later
  • dell alienware_m15_r3_firmware1.14.0 or later
  • dell alienware_m15_r4_firmware1.8.0 or later
  • dell alienware_m17_r2_firmware1.12.0 or later

Affected products

ProductAffected versionsFixed in
dell alienware_13_r3_firmwarev < 1.16.11.16.1
dell alienware_15_r3_firmwarev < 1.16.11.16.1
dell alienware_15_r4_firmwarev < 1.17.01.17.0
dell alienware_17_r4_firmwarev < 1.16.11.16.1
dell alienware_17_r5_firmwarev < 1.17.01.17.0
dell alienware_area_51m_r1_firmwarev < 1.18.01.18.0
dell alienware_area_51m_r2_firmwarev < 1.13.01.13.0
dell alienware_aurora_r8_firmwarev < 1.0.201.0.20
dell alienware_m15_r2_firmwarev < 1.12.01.12.0
dell alienware_m15_r3_firmwarev < 1.14.01.14.0
dell alienware_m15_r4_firmwarev < 1.8.01.8.0
dell alienware_m17_r2_firmwarev < 1.12.01.12.0
dell alienware_m17_r3_firmwarev < 1.14.01.14.0
dell alienware_m17_r4_firmwarev < 1.8.01.8.0
dell alienware_x15_r1_firmwarev < 1.7.01.7.0
dell alienware_x17_r1_firmwarev < 1.7.01.7.0
dell edge_gateway_3000_firmwarev < 1.7.01.7.0
dell edge_gateway_5000_firmwarev < 1.17.01.17.0
dell edge_gateway_5100_firmwarev < 1.17.01.17.0
dell embedded_box_pc_3000_firmwarev < 1.13.01.13.0
dell embedded_box_pc_5000_firmwarev < 1.14.01.14.0
dell inspiron_14_3473_firmwarev < 1.14.01.14.0
dell inspiron_15_3573_firmwarev < 1.14.01.14.0
dell inspiron_15_5566_firmwarev < 1.18.01.18.0
dell inspiron_3277_firmwarev < 1.19.01.19.0
dell inspiron_3465_firmwarev < 1.12.01.12.0
dell inspiron_3477_firmwarev < 1.19.01.19.0
dell inspiron_3482_firmwarev < 1.13.01.13.0
dell inspiron_3502_firmwarev < 1.7.01.7.0
dell inspiron_3510_firmwarev < 1.6.01.6.0
dell inspiron_3565_firmwarev < 1.12.01.12.0
dell inspiron_3582_firmwarev < 1.13.01.13.0
dell inspiron_3782_firmwarev < 1.13.01.13.0
dell latitude_3379_firmwarev < 1.0.341.0.34
dell vostro_14_5468_firmwarev < 1.19.01.19.0
dell vostro_15_5568_firmwarev < 1.19.01.19.0
dell vostro_3267_firmwarev < 1.20.01.20.0
dell vostro_3268_firmwarev < 1.20.01.20.0
dell vostro_3572_firmwarev < 1.14.01.14.0
dell vostro_3582_firmwarev < 1.13.01.13.0
dell vostro_3660_firmwarev < 1.20.01.20.0
dell vostro_3667_firmwarev < 1.20.01.20.0
dell vostro_3668_firmwarev < 1.20.01.20.0
dell vostro_3669_firmwarev < 1.20.01.20.0
dell wyse_7040_thin_client_firmwarev < 1.15.01.15.0
dell xps_8930_firmwarev < 1.1.211.1.21

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-24421 · Dell Alienware 13 R3 Firmware · Dark Radar