Alienware 13 R3 Firmware CVE-2022-24421

HIGH

Buffer Overflow (CWE-119)

2022-03-11 security_alert@emc.com

RCE Dell Buffer Overflow Alienware 13 R3 Firmware Alienware 15 R3 Firmware Alienware 15 R4 Firmware Alienware 17 R4 Firmware Alienware 17 R5 Firmware Alienware Area 51M R1 Firmware Alienware Area 51M R2 Firmware Alienware Aurora R8 Firmware Alienware M15 R2 Firmware Alienware M15 R3 Firmware Alienware M15 R4 Firmware Alienware M17 R2 Firmware Alienware M17 R3 Firmware Alienware M17 R4 Firmware Alienware X15 R1 Firmware Alienware X17 R1 Firmware Edge Gateway 3000 Firmware Edge Gateway 5000 Firmware Edge Gateway 5100 Firmware Embedded Box Pc 3000 Firmware Embedded Box Pc 5000 Firmware Inspiron 14 3473 Firmware Inspiron 15 3573 Firmware Inspiron 15 5566 Firmware Inspiron 3277 Firmware Inspiron 3465 Firmware Inspiron 3477 Firmware Inspiron 3482 Firmware Inspiron 3502 Firmware Inspiron 3510 Firmware Inspiron 3565 Firmware Inspiron 3582 Firmware Inspiron 3782 Firmware Latitude 3379 Firmware Vostro 14 5468 Firmware Vostro 15 5568 Firmware Vostro 3267 Firmware Vostro 3268 Firmware Vostro 3572 Firmware Vostro 3582 Firmware Vostro 3660 Firmware Vostro 3667 Firmware Vostro 3668 Firmware Vostro 3669 Firmware Wyse 7040 Thin Client Firmware Xps 8930 Firmware

7.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Mar 11, 2022 - 22:15 nvd

HIGH 7.8

DescriptionNVD

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

AnalysisAI

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Affected products include: Dell Alienware 13 R3 Firmware, Dell Alienware 15 R3 Firmware, Dell Alienware 15 R4 Firmware, Dell Alienware 17 R4 Firmware, Dell Alienware 17 R5 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Alienware 13 R3 Firmware

View all

CVE-2022-24420 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24419 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24416 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24415 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2021-36325 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2021-36324 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2021-36323 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2023-4966 CRITICAL POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

CVE-2017-6736 HIGH POC

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

Share

CVE-2022-24421 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy