CVE-2024-22429
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious...
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
- Record
CVE-2024-22429- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2024-19973
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
- Record
EUVD-2024-19973- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vmrr-46g9-357m
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious...
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
- Record
GHSA-vmrr-46g9-357m- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
- Record
CVE-2024-22429- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- dell cpg bios
- dell edge gateway 3000 firmware
- dell edge gateway 5000 firmware
- dell embedded box pc 3000 firmware
- dell embedded box pc 5000 firmware
- dell latitude 12 rugged extreme 7214 firmware
- dell latitude 13 3380
- dell latitude 13 3380 firmware
- dell latitude 3180 firmware
- dell latitude 3189 firmware
- dell latitude 3190 2-in-1 firmware
- dell latitude 3190 firmware
Show 47 moreShow less
- dell latitude 3300 firmware
- dell latitude 3390 2-in-1
- dell latitude 3390 2-in-1 firmware
- dell latitude 5280 firmware
- dell latitude 5288 firmware
- dell latitude 5290 2-in-1 firmware
- dell latitude 5290 firmware
- dell latitude 5400 firmware
- dell latitude 5414 firmware
- dell latitude 5414 rugged firmware
- dell latitude 5420 rugged firmware
- dell latitude 5424 firmware
- dell latitude 5424 rugged firmware
- dell latitude 5480 firmware
- dell latitude 5488 firmware
- dell latitude 5490 firmware
- dell latitude 5580 firmware
- dell latitude 5590 firmware
- dell latitude 7212 rugged extreme tablet firmware
- dell latitude 7280 firmware
- dell latitude 7285 2-in-1 firmware
- dell latitude 7290 firmware
- dell latitude 7380 firmware
- dell latitude 7390 2-in-1 firmware
- dell latitude 7390 firmware
- dell latitude 7414 rugged extreme firmware
- dell latitude 7414 rugged firmware
- dell latitude 7424 rugged extreme firmware
- dell latitude 7480 firmware
- dell latitude 7490 firmware
- dell optiplex 3050 all-in-one firmware
- dell optiplex 3050 firmware
- dell optiplex 5050 firmware
- dell optiplex 7450 all-in-one firmware
- dell precision 3420 tower
- dell precision 3420 tower firmware
- dell precision 3520 firmware
- dell precision 3620 tower
- dell precision 3620 tower firmware
- dell precision 5520 firmware
- dell precision 5530 2-in-1 firmware
- dell precision 5820 tower firmware
- dell precision 7520 firmware
- dell precision 7720 firmware
- dell wyse 5070
- dell wyse 5070 firmware
- dell wyse 7040 thin client firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-22429 is a high vulnerability (CVSS 7.5) in Dell Cpg Bios, published May 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. No source names a fixed version.