CVE-2024-22448

moderate-risk

Published 2024-04-10

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.7/10 Medium

LOCAL / HIGH complexity

Affected Products (20)

Alienware M15 R6 Firmware

Alienware M15 R7 Firmware

Alienware M16 R1 Firmware

Alienware M18 R1 Firmware

Alienware M18 R2 Firmware

Alienware X14 R2 Firmware

Alienware X16 R1 Firmware

Alienware X16 R2 Firmware

Chengming 3900 Firmware

Chengming 3910 Firmware

Chengming 3911 Firmware

Chengming 3990 Firmware

Chengming 3991 Firmware

G15 5510 Firmware

G15 5511 Firmware

G15 5520 Firmware

G15 5530 Firmware

G16 7620 Firmware

G16 7630 Firmware

G3 3500 Firmware

Affected Vendors

Dell

References (2)

Vendor Advisory https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066

/ 100

moderate-risk

Severity 12/34 · Low

Exploitability 0/34 · Minimal

Exposure 33/34 · Critical