7.5
High
CVE-2024-22429 Dell BIOS contains an Improper Input Validation vulnerability
Description
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 2.36 | earliest → < 2.36.0 | 2.36.0 |
| CPG BIOS 2.30 | earliest → < 2.30.0 | 2.30.0 |
| CPG BIOS 1.50 | earliest → < 1.50.0 | 1.50.0 |
| CPG BIOS 1.46 | earliest → < 1.46.0 | 1.46.0 |
| CPG BIOS 1.32 | earliest → < 1.32.0 | 1.32.0 |
| CPG BIOS 1.31 | earliest → < 1.31.0 | 1.31.0 |
| CPG BIOS 1.29 | earliest → < 1.29.0 | 1.29.0 |
| CPG BIOS 1.28 | earliest → < 1.28.0 | 1.28.0 |
| CPG BIOS 1.27 | earliest → < 1.27.0 | 1.27.0 |
Show the 16 other branches Hide the 16 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 1.18 | earliest → < 1.18.0 | 1.18.0 |
| edge_gateway_3000_firmware 1.18 | earliest → < 1.18.0 | 1.18.0 |
| latitude_13_3380 1.27 | earliest → < 1.27.0 | 1.27.0 |
| latitude_3180_firmware 1.29 | earliest → < 1.29.0 | 1.29.0 |
| latitude_3189_firmware 1.29 | earliest → < 1.29.0 | 1.29.0 |
| latitude_3390_2-in-1 1.31 | earliest → < 1.31.0 | 1.31.0 |
| latitude_5414_firmware 1.46 | earliest → < 1.46.0 | 1.46.0 |
| latitude_5424_firmware 1.32 | earliest → < 1.32.0 | 1.32.0 |
| latitude_7414_rugged_extreme_firmware 1.46 | earliest → < 1.46.0 | 1.46.0 |
| precision_3420_tower 2.30 | earliest → < 2.30.0 | 2.30.0 |
| precision_3620_tower 2.30 | earliest → < 2.30.0 | 2.30.0 |
| latitude_5280_firmware 2.36 | earliest → < 2.36.0 | 2.36.0 |
| latitude_12_rugged_extreme_7214_firmware 1.46 | earliest → < 1.46.0 | 1.46.0 |
| latitude_3300_firmware 1.28 | earliest → < 1.28.0 | 1.28.0 |
| latitude_7212_rugged_extreme_tablet_firmware 1.50 | earliest → < 1.50.0 | 1.50.0 |
| wyse_5070 1.31 | earliest → < 1.31.0 | 1.31.0 |
Other CVEs of CPG BIOS
The 110 CVEs of CPG BIOS →
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability
5.1
Medium
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component
3.8
Low
CVE-2024-32860
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High
CVE-2024-32858
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High