Vulnerability · Published Apr 10, 2024 · Assigned by dell

CVE-2024-22448

Medium 4.7

In plain English

A medium-severity out-of-bounds write in CPG BIOS from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)4.7Medium

Exploit odds (30 days)0.2%top 92.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

Affected products (as reported)

Vendor	Product	Versions
Dell	CPG BIOS	N/A – before 1.29.0N/A – before 1.16.0N/A – before 1.13.0N/A – before 1.28.0N/A – before 1.14.0N/A – before 1.31.0N/A – before 1.31.1N/A – before 1.31.2

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

References

https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066 vendor-advisory