CVE-2022-24410

MediumCVSS 4.2/10Last modified Jun 17, 2026

Description

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200CWE-312

Affected software

VendorProductVersions
DellCPG BIOSAll supported versions

References

Timeline

Published
Feb 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-244117.8Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PCVE-2022-244127.5Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network attacker could potentCVE-2022-244133.6Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesysteCVE-2022-244146.5Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverseCVE-2022-244157.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-244167.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-244176.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-244186.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-244197.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-24427.2The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via the 'path' parameterCVE-2022-244207.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-244217.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili
CVE-2022-24410: Medium severity, CVSS 4.2 | Vulnix