CVE-2024-22448
MEDIUMCVSS 4.4/10EPSS 0.18%
Last modified
CVE-2024-22448 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | < 1.29.0 |
| Dell | Alienware M15 R7 Firmware | < 1.24.0 |
| Dell | Alienware M16 R1 Firmware | < 1.16.0 |
| Dell | Alienware M18 R1 Firmware | < 1.16.0 |
| Dell | Alienware M18 R2 Firmware | < 1.4.4 |
| Dell | Alienware X14 R2 Firmware | < 1.13.0 |
| Dell | Alienware X16 R1 Firmware | < 1.13.0 |
| Dell | Alienware X16 R2 Firmware | < 1.2.0 |
| Dell | Chengming 3900 Firmware | < 1.22.0 |
| Dell | Chengming 3910 Firmware | < 1.13.1 |
| Dell | Chengming 3911 Firmware | < 1.13.1 |
| Dell | Chengming 3990 Firmware | < 1.27.0 |
| Dell | Chengming 3991 Firmware | < 1.27.0 |
| Dell | G15 5510 Firmware | < 1.24.0 |
| Dell | G15 5511 Firmware | < 1.28.0 |
| Dell | G15 5520 Firmware | < 1.24.0 |
| Dell | G15 5530 Firmware | < 1.14.0 |
| Dell | G16 7620 Firmware | < 1.24.0 |
| Dell | G16 7630 Firmware | < 1.14.0 |
| Dell | G3 3500 Firmware | < 1.29.0 |
| Dell | G5 5500 Firmware | < 1.29.0 |
| Dell | G7 7500 Firmware | < 1.31.0 |
| Dell | G7 7700 Firmware | < 1.31.0 |
| Dell | Inspiron 13 5310 Firmware | < 2.27.0 |
| Dell | Inspiron 13 5320 Firmware | < 1.18.0 |
| Dell | Inspiron 13 5330 Firmware | < 1.14.0 |
| Dell | Inspiron 14 5410 Firmware | < 2.26.0 |
| Dell | Inspiron 14 5418 Firmware | < 2.26.0 |
| Dell | Inspiron 14 5420 Firmware | < 1.21.0 |
| Dell | Inspiron 14 5430 Firmware | < 1.13.0 |
| Dell | Inspiron 14 5440 Firmware | < 1.3.1 |
| Dell | Inspiron 14 7420 2-In-1 Firmware | < 1.19.0 |
| Dell | Inspiron 14 7430 2-In-1 Firmware | < 1.13.0 |
| Dell | Inspiron 14 7440 2-In-1 Firmware | < 1.3.1 |
| Dell | Inspiron 14 Plus 7420 Firmware | < 1.22.0 |
| Dell | Inspiron 14 Plus 7430 Firmware | < 1.14.0 |
| Dell | Inspiron 14 Plus 7440 Firmware | < 1.6.0 |
| Dell | Inspiron 15 3511 Firmware | < 1.28.0 |
| Dell | Inspiron 15 3520 Firmware | < 1.23.0 |
| Dell | Inspiron 15 3530 Firmware | < 1.10.0 |
| Dell | Inspiron 15 5510 Firmware | < 2.26.0 |
| Dell | Inspiron 15 5518 Firmware | < 2.26.0 |
| Dell | Inspiron 15 7510 Firmware | < 1.23.0 |
| Dell | Inspiron 16 5620 Firmware | < 1.21.0 |
| Dell | Inspiron 16 5630 Firmware | < 1.13.0 |
| Dell | Inspiron 16 5640 Firmware | < 1.3.0 |
| Dell | Inspiron 16 7610 Firmware | < 1.23.0 |
| Dell | Inspiron 16 7620 2-In-1 Firmware | < 1.19.0 |
| Dell | Inspiron 16 7630 2-In-1 Firmware | < 1.13.0 |
| Dell | Inspiron 16 7640 2-In-1 Firmware | < 1.4.0 |
Showing 50 of 268 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-22448?
Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
How severe is CVE-2024-22448?
CVE-2024-22448 has a CVSS score of 4.4/10 (MEDIUM severity). The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2024-22448?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-22441HPE Cray Parallel Application Launch Service (PALS) is subje…9.8
- CVE-2024-22442The vulnerability could be remotely exploited to bypass auth…9.8
- CVE-2024-22443A vulnerability in the web-based management interface of Edg…8.8
- CVE-2024-22444A vulnerability within the web-based management interface of…6.1
- CVE-2024-22445 Dell PowerProtect Data Manager, version 19.15 and prior ver…7.2
- CVE-2024-22447Dell Peripheral Manager, versions prior to 1.7.3, contain an…7.8
- CVE-2024-22449 Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x cont…7.8
- CVE-2024-2245Cross-Site Scripting vulnerability in moziloCMS version 2.0.…6.1
- CVE-2024-22450Dell Alienware Command Center, versions prior to 6.2.7.0, co…7.8
- CVE-2024-22451Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, conta…6.7
- CVE-2024-22452Dell Display and Peripheral Manager for macOS prior to 1.3 c…7.8
- CVE-2024-22453Dell PowerEdge Server BIOS contains a heap-based buffer over…6
Are you affected by CVE-2024-22448?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST