Dell BIOS contains an improper input validation vulnerability
Published Oct 12, 2022
5.6
MEDIUMCVSS 3.1
EPSS 0.17%
Description
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<2.3.1
- Version
Configuration 1
- < 1.21.0
Running on/with
- n/a
Configuration 2
- < 1.18.0
Running on/with
- n/a
Configuration 3
- < 1.0.16
Running on/with
- n/a
Configuration 4
- < 1.1.16
Running on/with
- n/a
Configuration 5
- < 1.5.0
Running on/with
- n/a
Configuration 6
- < 2.3.1
Running on/with
- n/a
Configuration 7
- < 1.0.23
Running on/with
- n/a
Configuration 8
- < 1.0.20
Running on/with
- n/a
Configuration 9
- < 2.14.0
Running on/with
- n/a
Configuration 10
- < 1.17.0
Running on/with
- n/a
Configuration 11
- < 1.19.0
Running on/with
- n/a
Configuration 12
- < 1.13.0
Running on/with
- n/a
Configuration 13
- < 2.14.0
Running on/with
- n/a
Configuration 14
- < 1.17.0
Running on/with
- n/a
Configuration 15
- < 1.19.0
Running on/with
- n/a
Configuration 16
- < 1.13.0
Running on/with
- n/a
Configuration 17
- < 1.5.0
Running on/with
- n/a
Configuration 18
- < 1.11.0
Running on/with
- n/a
Configuration 19
- < 1.7.0
Running on/with
- n/a
Configuration 20
- < 1.11.0
Running on/with
- n/a
Configuration 21
- < 1.7.0
Running on/with
- n/a
Configuration 22
- < 2.24.0
Running on/with
- n/a
Configuration 23
- < 1.11.0
Running on/with
- n/a
Configuration 24
- < 1.14.0
Running on/with
- n/a
Configuration 25
- < 1.14.0
Running on/with
- n/a
Configuration 26
- < 1.18.0
Running on/with
- n/a
Configuration 27
- < 1.20.0
Running on/with
- n/a
Configuration 28
- < 1.22.0
Configuration 29
- < 1.22.0
Configuration 30
- < 1.10.0
Configuration 31
- < 1.15.0
Configuration 32
- < 1.20.0
Running on/with
- n/a
Configuration 33
- < 1.20.0
Running on/with
- n/a
Configuration 34
- < 1.9.0
Running on/with
- n/a
Configuration 35
- < 1.19.0
Running on/with
- n/a
Configuration 36
- < 1.15.0
Running on/with
- n/a
Configuration 37
- < 1.16.0
Running on/with
- n/a
Configuration 38
- < 2.20.0
Running on/with
- n/a
Configuration 39
- < 2.16.0
Running on/with
- n/a
Configuration 40
- < 2.20.0
Running on/with
- n/a
Configuration 41
- < 1.21.0
Running on/with
- n/a
Configuration 42
- < 1.16.0
Running on/with
- n/a
Configuration 43
- < 2.24.0
Running on/with
- n/a
Configuration 44
- < 1.11.0
Running on/with
- n/a
Configuration 45
- < 1.21.0
Running on/with
- n/a
Configuration 46
- < 1.20.0
Running on/with
- n/a
Configuration 47
- < 1.18.0
Running on/with
- n/a
Configuration 48
- < 1.15.0
Running on/with
- n/a
Configuration 49
- < 1.20.0
Running on/with
- n/a
Configuration 50
- < 1.23.0
Running on/with
- n/a
Configuration 51
- < 1.17.0
Running on/with
- n/a
Configuration 52
- < 1.9.0
Running on/with
- n/a
Configuration 53
- < 1.20.0
Running on/with
- n/a
Configuration 54
- < 1.18.0
Running on/with
- n/a
Configuration 55
- < 1.15.0
Running on/with
- n/a
Configuration 56
- < 1.20.0
Running on/with
- n/a
Configuration 57
- < 1.23.0
Running on/with
- n/a
Configuration 58
- < 2.24.0
Running on/with
- n/a
Configuration 59
- < 1.11.0
Running on/with
- n/a
Configuration 60
- < 1.20.0
Running on/with
- n/a
Configuration 61
- < 1.18.0
Running on/with
- n/a
Configuration 62
- < 1.15.0
Running on/with
- n/a
Configuration 63
- < 1.20.0
Running on/with
- n/a
Configuration 64
- < 1.23.0
Running on/with
- n/a
Configuration 65
- < 1.14.0
Running on/with
- n/a
Configuration 66
- < 1.14.0
Running on/with
- n/a
Configuration 67
- < 1.18.0
Running on/with
- n/a
Configuration 68
- < 1.19.0
Running on/with
- n/a
Configuration 69
- < 1.13.0
Running on/with
- n/a
Configuration 70
- < 1.13.0
Running on/with
- n/a
Configuration 71
- < 1.2.20
Running on/with
- n/a
Configuration 72
- < 2.16.0
Running on/with
- n/a
Configuration 73
- < 2.16.0
Running on/with
- n/a
Configuration 74
- < 2.16.0
Running on/with
- n/a
Configuration 75
- < 1.20.0
Running on/with
- n/a
Configuration 76
- < 1.16.0
Running on/with
- n/a
Configuration 77
- < 1.23.0
Running on/with
- n/a
Configuration 78
- < 1.20.0
Running on/with
- n/a
Configuration 79
- < 1.20.0
Running on/with
- n/a
Configuration 80
- < 1.21.0
Running on/with
- n/a
Configuration 81
- < 1.21.0
Running on/with
- n/a
Configuration 82
- < 1.16.0
Running on/with
- n/a
Configuration 83
- < 1.10.0
Running on/with
- n/a
Configuration 84
- < 2.16.0
Running on/with
- n/a
Configuration 85
- < 1.20.0
Running on/with
- n/a
Configuration 86
- < 1.20.0
Running on/with
- n/a
Configuration 87
- < 1.20.0
Running on/with
- n/a
Configuration 88
- < 1.16.0
Running on/with
- n/a
Configuration 89
- < 1.23.0
Running on/with
- n/a
Configuration 90
- < 1.20.0
Running on/with
- n/a
Configuration 91
- < 1.20.0
Running on/with
- n/a
Configuration 92
- < 2.12.0
Running on/with
- n/a
Configuration 93
- < 1.10.0
Running on/with
- n/a
Configuration 94
- < 1.19.0
Running on/with
- n/a
Configuration 95
- < 1.25.0
Running on/with
- n/a
Configuration 96
- < 1.25.0
Running on/with
- n/a
Configuration 97
- < 1.18.0
Running on/with
- n/a
Configuration 98
- < 1.16.0
Running on/with
- n/a
Configuration 99
- < 1.19.0
Running on/with
- n/a
Configuration 100
- < 1.17.0
Running on/with
- n/a
Configuration 101
- < 1.15.0
Running on/with
- n/a
Configuration 102
- < 1.25.0
Running on/with
- n/a
Configuration 103
- < 1.25.0
Running on/with
- n/a
Configuration 104
- < 1.18.0
Running on/with
- n/a
Configuration 105
- < 1.16.0
Running on/with
- n/a
Configuration 106
- < 1.19.0
Running on/with
- n/a
Configuration 107
- < 1.17.0
Running on/with
- n/a
Configuration 108
- < 1.13.0
Running on/with
- n/a
Configuration 109
- < 1.2.20
Running on/with
- n/a
Configuration 110
- < 1.16.0
Running on/with
- n/a
Configuration 111
- < 1.16.0
Running on/with
- n/a
Configuration 112
- < 1.17.0
Running on/with
- n/a
Configuration 113
- < 1.10.0
Running on/with
- n/a
Configuration 114
- < 1.19.0
Running on/with
- n/a
Configuration 115
- < 1.19.0
Running on/with
- n/a
Configuration 116
- < 1.22.0
Running on/with
- n/a
Configuration 117
- < 1.22.0
Running on/with
- n/a
Configuration 118
- < 1.17.0
Running on/with
- n/a
Configuration 119
- < 1.23.0
Running on/with
- n/a
Configuration 120
- < 1.16.0
Running on/with
- n/a
Configuration 121
- < 1.15.0
Running on/with
- n/a
Configuration 122
- < 1.0.36
Running on/with
- n/a
Configuration 123
- < 1.21.0
Running on/with
- n/a
Configuration 124
- < 1.25.0
Running on/with
- n/a
Configuration 125
- < 1.20.0
Running on/with
- n/a
Configuration 126
- < 1.26.0
Running on/with
- n/a
Configuration 127
- < 1.19.0
Running on/with
- n/a
Configuration 128
- < 1.29.0
Running on/with
- n/a
Configuration 129
- < 1.24.0
Running on/with
- n/a
Configuration 130
- < 1.22.0
Running on/with
- n/a
Configuration 131
- < 1.23.0
Running on/with
- n/a
Configuration 132
- < 1.23.0
Running on/with
- n/a
Configuration 133
- < 1.15.0
Running on/with
- n/a
Configuration 134
- < 1.15.0
Running on/with
- n/a
Configuration 135
- < 1.19.0
Running on/with
- n/a
Configuration 136
- < 1.21.0
Running on/with
- n/a
Configuration 137
- < 1.15.0
Running on/with
- n/a
Configuration 138
- < 1.15.0
Running on/with
- n/a
Configuration 139
- < 1.36.0
Running on/with
- n/a
Configuration 140
- < 1.18.0
Running on/with
- n/a
Configuration 141
- < 1.26.0
Running on/with
- n/a
Configuration 142
- < 1.26.0
Running on/with
- n/a
Configuration 143
- < 1.24.0
Running on/with
- n/a
Configuration 144
- < 1.23.0
Running on/with
- n/a
Configuration 145
- < 1.9.0
Running on/with
- n/a
Configuration 146
- < 1.19.0
Running on/with
- n/a
Configuration 147
- < 1.21.0
Running on/with
- n/a
Configuration 148
- < 1.15.0
Running on/with
- n/a
Configuration 149
- < 1.15.0
Running on/with
- n/a
Configuration 150
- < 1.26.0
Running on/with
- n/a
Configuration 151
- < 1.24.0
Running on/with
- n/a
Configuration 152
- < 1.23.0
Running on/with
- n/a
Configuration 153
- < 1.19.0
Running on/with
- n/a
Configuration 154
- < 1.16.0
Running on/with
- n/a
Configuration 155
- < 1.40.0
Running on/with
- n/a
Configuration 156
- < 1.36.0
Running on/with
- n/a
Configuration 157
- < 1.23.0
Running on/with
- n/a
Configuration 158
- < 1.23.0
Running on/with
- n/a
Configuration 159
- < 1.23.0
Running on/with
- n/a
Configuration 160
- < 1.27.0
Running on/with
- n/a
Configuration 161
- < 1.21.0
Running on/with
- n/a
Configuration 162
- < 1.17.0
Running on/with
- n/a
Configuration 163
- < 1.30.3
Running on/with
- n/a
Configuration 164
- < 1.27.0
Running on/with
- n/a
Configuration 165
- < 1.29.0
Running on/with
- n/a
Configuration 166
- < 1.27.0
Running on/with
- n/a
Configuration 167
- < 1.26.0
Running on/with
- n/a
Configuration 168
- < 1.21.0
Running on/with
- n/a
Configuration 169
- < 1.18.0
Running on/with
- n/a
Configuration 170
- < 1.17.0
Running on/with
- n/a
Configuration 171
- < 1.36.0
Running on/with
- n/a
Configuration 172
- < 1.18.0
Running on/with
- n/a
Configuration 173
- < 1.27.0
Running on/with
- n/a
Configuration 174
- < 1.27.0
Running on/with
- n/a
Configuration 175
- < 1.16.0
Running on/with
- n/a
Configuration 176
- < 1.14.0
Running on/with
- n/a
Configuration 177
- < 1.32.3
Running on/with
- n/a
Configuration 178
- < 1.32.3
Running on/with
- n/a
Configuration 179
- < 1.32.3
Running on/with
- n/a
Configuration 180
- < 1.35.3
Running on/with
- n/a
Configuration 181
- < 1.35.3
Running on/with
- n/a
Configuration 182
- < 1.20.1
Running on/with
- n/a
Configuration 183
- < 1.17.0
Running on/with
- n/a
Configuration 184
- < 1.21.0
Running on/with
- n/a
Configuration 185
- < 1.22.0
Running on/with
- n/a
Configuration 186
- < 1.21.0
Running on/with
- n/a
Configuration 187
- < 1.16.0
Running on/with
- n/a
Configuration 188
- < 2.14.0
Running on/with
- n/a
Configuration 189
- < 2.7.0
Running on/with
- n/a
Configuration 190
- < 1.15.0
Running on/with
- n/a
Configuration 191
- < 1.21.0
Running on/with
- n/a
Configuration 192
- < 1.7.0
Running on/with
- n/a
Configuration 193
- < 1.21.0
Running on/with
- n/a
Configuration 194
- < 1.16.0
Running on/with
- n/a
Configuration 195
- < 1.14.0
Running on/with
- n/a
Configuration 196
- < 1.21.0
Running on/with
- n/a
Configuration 197
- < 1.16.0
Running on/with
- n/a
Configuration 198
- < 1.24.0
Running on/with
- n/a
Configuration 199
- < 1.21.0
Running on/with
- n/a
Configuration 200
- < 1.21.0
Running on/with
- n/a
Configuration 201
- < 1.16.0
Running on/with
- n/a
Configuration 202
- < 1.14.0
Running on/with
- n/a
Configuration 203
- < 1.15.0
Running on/with
- n/a
Configuration 204
- < 1.14.0
Running on/with
- n/a
Configuration 205
- < 1.22.0
Running on/with
- n/a
Configuration 206
- < 1.21.0
Running on/with
- n/a
Configuration 207
- < 1.16.0
Running on/with
- n/a
Configuration 208
- < 1.16.0
Running on/with
- n/a
Configuration 209
- < 1.21.0
Running on/with
- n/a
Configuration 210
- < 1.13.0
Running on/with
- n/a
Configuration 211
- < 2.22.0
Running on/with
- n/a
Configuration 212
- < 1.20.0
Running on/with
- n/a
Configuration 213
- < 1.15.0
Running on/with
- n/a
Configuration 214
- < 1.14.0
Running on/with
- n/a
Configuration 215
- < 1.32.3
Running on/with
- n/a
Configuration 216
- < 1.26.0
Running on/with
- n/a
Configuration 217
- < 1.19.0
Running on/with
- n/a
Configuration 218
- < 1.21.0
Running on/with
- n/a
Configuration 219
- < 1.15.0
Running on/with
- n/a
Configuration 220
- < 1.15.0
Running on/with
- n/a
Configuration 221
- < 2.22.0
Running on/with
- n/a
Configuration 222
- < 2.15.0
Running on/with
- n/a
Configuration 223
- < 1.16.0
Running on/with
- n/a
Configuration 224
- < 2.20.0
Running on/with
- n/a
Configuration 225
- < 1.23.0
Running on/with
- n/a
Configuration 226
- < 1.26.0
Running on/with
- n/a
Configuration 227
- < 1.20.8
Running on/with
- n/a
Configuration 228
- < 1.18.0
Running on/with
- n/a
Configuration 229
- < 2.15.0
Running on/with
- n/a
Configuration 230
- < 2.21.0
Running on/with
- n/a
Configuration 231
- < 1.28.3
Running on/with
- n/a
Configuration 232
- < 1.26.0
Running on/with
- n/a
Configuration 233
- < 1.24.0
Running on/with
- n/a
Configuration 234
- < 1.21.0
Running on/with
- n/a
Configuration 235
- < 1.17.0
Running on/with
- n/a
Configuration 236
- < 1.17.0
Running on/with
- n/a
Configuration 237
- < 1.26.0
Running on/with
- n/a
Configuration 238
- < 1.24.0
Running on/with
- n/a
Configuration 239
- < 1.21.0
Running on/with
- n/a
Configuration 240
- < 1.17.0
Running on/with
- n/a
Configuration 241
- < 2.26.1
Running on/with
- n/a
Configuration 242
- < 2.26.1
Running on/with
- n/a
Configuration 243
- < 2.24.0
Running on/with
- n/a
Configuration 244
- < 1.22.0
Running on/with
- n/a
Configuration 245
- < 1.22.0
Running on/with
- n/a
Configuration 246
- < 1.17.0
Running on/with
- n/a
Configuration 247
- < 2.24.0
Running on/with
- n/a
Configuration 248
- < 1.11.0
Running on/with
- n/a
Configuration 249
- < 1.20.0
Running on/with
- n/a
Configuration 250
- < 1.18.0
Running on/with
- n/a
Configuration 251
- < 1.20.0
Running on/with
- n/a
Configuration 252
- < 1.17.0
Running on/with
- n/a
Configuration 253
- < 1.20.0
Running on/with
- n/a
Configuration 254
- < 1.18.0
Running on/with
- n/a
Configuration 255
- < 1.15.0
Running on/with
- n/a
Configuration 256
- < 1.20.0
Running on/with
- n/a
Configuration 257
- < 1.18.0
Running on/with
- n/a
Configuration 258
- < 1.20.0
Running on/with
- n/a
Configuration 259
- < 1.22.0
Running on/with
- n/a
Configuration 260
- < 1.22.0
Running on/with
- n/a
Configuration 261
- < 1.22.0
Running on/with
- n/a
Configuration 262
- < 2.24.0
Running on/with
- n/a
Configuration 263
- < 1.11.0
Running on/with
- n/a
Configuration 264
- < 2.14.0
Running on/with
- n/a
Configuration 265
- < 2.14.0
Running on/with
- n/a
Configuration 266
- < 2.14.0
Running on/with
- n/a
Configuration 267
- < 1.15.0
Running on/with
- n/a
Configuration 268
- < 1.18.0
Running on/with
- n/a
Configuration 269
- < 1.19.0
Running on/with
- n/a
Configuration 270
- < 2.16.0
Running on/with
- n/a
Configuration 271
- < 1.20.0
Running on/with
- n/a
Configuration 272
- < 1.23.0
Running on/with
- n/a
Configuration 273
- < 1.14.0
Running on/with
- n/a
Configuration 274
- < 1.15.0
Running on/with
- n/a
Configuration 275
- < 1.18.0
Configuration 276
- < 1.15.0
Configuration 277
- < 1.16.1
Running on/with
- n/a
Configuration 278
- < 1.17.0
Running on/with
- n/a
Configuration 279
- < 1.17.0
Running on/with
- n/a
Configuration 280
- < 1.18.0
Running on/with
- n/a
Configuration 281
- < 1.14.0
Running on/with
- n/a
Configuration 282
- < 2.23.0
Running on/with
- n/a
Configuration 283
- < 1.21.0
Running on/with
- n/a
Configuration 284
- < 1.20.0
Running on/with
- n/a
Configuration 285
- < 1.26.0
Running on/with
- n/a
Configuration 286
- < 1.22.0
Running on/with
- n/a
Configuration 287
- < 1.18.0
Configuration 288
- < 1.1.24
Configuration 289
- < 2.9.0
Configuration 290
- < 1.5.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1 other source (CVE.org) ▾
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed May 16, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (7 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.17% (0.00169) | 5.58th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.16% (0.00163) | 5.82th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.02% (0.00020) | 3.05th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00042) | 5.07th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.04% (0.00042) | 5.63th | v3 (v2023.03.01) |
| Mar 6, 2023 | 0.89% (0.00885) | 27.89th | v2 (v2022.01.01) |
| Oct 13, 2022 | 0.89% (0.00885) | 26.55th | v2 (v2022.01.01) |
References (1)
- https://www.dell.com/support/kbdoc/000203758 Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.dell.com/support/kbdoc/000203758 | Vendor Advisory |
Change history (0)
No recorded changes yet.