CVE-2022-24419: Dell Alienware 13 r3 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.

Affected products

Dell Alienware 13 r3 Firmware: before 1.16.1 (fixed in 1.16.1)
Dell Alienware 15 r3 Firmware: before 1.16.1 (fixed in 1.16.1)
Dell Alienware 15 r4 Firmware: before 1.17.0 (fixed in 1.17.0)
Dell Alienware 17 r4 Firmware: before 1.16.1 (fixed in 1.16.1)
Dell Alienware 17 r5 Firmware: before 1.17.0 (fixed in 1.17.0)
Dell Alienware Area 51m r1 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell Alienware Area 51m r2 Firmware: before 1.13.0 (fixed in 1.13.0)
Dell Alienware Aurora r8 Firmware: before 1.0.20 (fixed in 1.0.20)
Dell Alienware m15 r2 Firmware: before 1.12.0 (fixed in 1.12.0)
Dell Alienware m15 r3 Firmware: before 1.14.0 (fixed in 1.14.0)
Dell Alienware m15 r4 Firmware: before 1.8.0 (fixed in 1.8.0)
Dell Alienware m17 r2 Firmware: before 1.12.0 (fixed in 1.12.0)
Dell Alienware m17 r3 Firmware: before 1.14.0 (fixed in 1.14.0)
Dell Alienware m17 r4 Firmware: before 1.8.0 (fixed in 1.8.0)
Dell Alienware x15 r1 Firmware: before 1.7.0 (fixed in 1.7.0)
Dell Alienware x17 r1 Firmware: before 1.7.0 (fixed in 1.7.0)
Dell Edge Gateway 3000 Firmware: before 1.7.0 (fixed in 1.7.0)
Dell Edge Gateway 5000 Firmware: before 1.17.0 (fixed in 1.17.0)
Dell Edge Gateway 5100 Firmware: before 1.17.0 (fixed in 1.17.0)
Dell Embedded Box Pc 3000 Firmware: before 1.13.0 (fixed in 1.13.0)
Dell Embedded Box Pc 5000 Firmware: before 1.14.0 (fixed in 1.14.0)
Dell Inspiron 14 3473 Firmware: before 1.14.0 (fixed in 1.14.0)
Dell Inspiron 15 3573 Firmware: before 1.14.0 (fixed in 1.14.0)
Dell Inspiron 15 5566 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell Inspiron 3277 Firmware: before 1.19.0 (fixed in 1.19.0)
and 21 more

Published 2022-03-11. Last modified 2026-06-17.