Summary
| Detail | |||
|---|---|---|---|
| Vendor | Dell | First view | 2021-11-12 |
| Product | Inspiron 3477 Firmware | Last view | 2023-02-10 |
| Version | Type | Os | |
| Update | |||
| Edition | |||
| Language | |||
| Sofware Edition | |||
| Target Software | |||
| Target Hardware | |||
| Other | |||
Activity : Overall
COMMON PLATFORM ENUMERATION: Repartition per Version
| CPE Name | Affected CVE |
|---|---|
| cpe:2.3:o:dell:inspiron_3477_firmware:*:*:*:*:*:*:*:* | 17 |
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 4.2 | 2023-02-10 | CVE-2022-24410 | Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces. |
| 7.8 | 2022-10-12 | CVE-2022-32493 | Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| 7.8 | 2022-10-12 | CVE-2022-32491 | Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM. |
| 7.8 | 2022-10-12 | CVE-2022-32489 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| 7.8 | 2022-10-12 | CVE-2022-32488 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| 7.8 | 2022-10-12 | CVE-2022-32487 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| 7.8 | 2022-10-12 | CVE-2022-32485 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| 4.4 | 2022-10-12 | CVE-2022-32484 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| 4.4 | 2022-10-12 | CVE-2022-32483 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| 7.8 | 2022-03-11 | CVE-2022-24421 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| 7.8 | 2022-03-11 | CVE-2022-24420 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| 7.8 | 2022-03-11 | CVE-2022-24419 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| 7.8 | 2022-03-11 | CVE-2022-24416 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| 7.8 | 2022-03-11 | CVE-2022-24415 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| 6.7 | 2021-11-12 | CVE-2021-36325 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| 6.7 | 2021-11-12 | CVE-2021-36324 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| 6.7 | 2021-11-12 | CVE-2021-36323 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 52% (9) | CWE-20 | Improper Input Validation |
| 29% (5) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 5% (1) | CWE-787 | Out-of-bounds Write |
| 5% (1) | CWE-312 | Cleartext Storage of Sensitive Information |
| 5% (1) | CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflo... |
