CVE-2024-22429: Input Validation
Published May 17, 2024
·Updated
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
Affected Software
101 affected components
Dell BIOS
All of the following
Dell Edge Gateway 5000 Firmware<1.28.0
Dell Edge Gateway 5000
All of the following
Dell Precision 5820 Tower Firmware<2.36.0
Dell Precision 5820 Tower
All of the following
Dell Edge Gateway 3000 Firmware<1.18.0
Dell Edge Gateway 3000
All of the following
Dell Embedded Box Pc 3000 Firmware<1.24.0
Dell Embedded Box Pc 3000
All of the following
Dell Embedded Box Pc 5000 Firmware<1.25.0
Dell Embedded Box Pc 5000
All of the following
Dell Latitude 12 Rugged Extreme 7214 Firmware<1.46.0
Dell Latitude 12 Rugged Extreme 7214
All of the following
Dell Latitude 13 3380 Firmware<1.27.0
Dell Latitude 13 3380
All of the following
Dell Latitude 3180 Firmware<1.29.0
Dell Latitude 3180
All of the following
Dell Latitude 3189 Firmware<1.29.0
Dell Latitude 3189
All of the following
Dell Latitude 3190 Firmware<1.34.0
Dell Latitude 3190
All of the following
Dell Latitude 3190 2-in-1 Firmware<1.34.0
Dell Latitude 3190 2-in-1
All of the following
Dell Latitude 3300 Firmware<1.28.0
Dell Latitude 3300
All of the following
Dell Latitude 3390 2-in-1 Firmware<1.31.0
Dell Latitude 3390 2-in-1
All of the following
Dell Latitude 5280 Firmware<1.36.0
Dell Latitude 5280
All of the following
Dell Latitude 5288 Firmware<1.36.0
Dell Latitude 5288
All of the following
Dell Latitude 5290 Firmware<1.35.0
Dell Latitude 5290
All of the following
Dell Latitude 5290 2-in-1 Firmware<1.34.0
Dell Latitude 5290 2-in-1
All of the following
Dell Latitude 5400 Firmware<1.30.0
Dell Latitude 5400
All of the following
Dell Latitude 5414 Rugged Firmware<1.46.0
Dell Latitude 5414 Rugged
All of the following
Dell Latitude 5420 Rugged Firmware<1.32.0
Dell Latitude 5420 Rugged
All of the following
Dell Latitude 5424 Rugged Firmware<1.32.0
Dell Latitude 5424 Rugged
All of the following
Dell Latitude 5480 Firmware<1.36.0
Dell Latitude 5480
All of the following
Dell Latitude 5488 Firmware<1.36.0
Dell Latitude 5488
All of the following
Dell Latitude 5490 Firmware<1.35.0
Dell Latitude 5490
All of the following
Dell Latitude 5580 Firmware<1.36.0
Dell Latitude 5580
All of the following
Dell Latitude 5590 Firmware<1.35.0
Dell Latitude 5590
All of the following
Dell Latitude 7212 Rugged Extreme Tablet Firmware<1.50.0
Dell Latitude 7212 Rugged Extreme Tablet
All of the following
Dell Latitude 7280 Firmware<1.37.0
Dell Latitude 7280
All of the following
Dell Latitude 7285 2-in-1 Firmware<1.26.0
Dell Latitude 7285 2-in-1
All of the following
Dell Latitude 7290 Firmware<1.38.0
Dell Latitude 7290
All of the following
Dell Latitude 7380 Firmware<1.37.0
Dell Latitude 7380
All of the following
Dell Latitude 7390 Firmware<1.38.0
Dell Latitude 7390
All of the following
Dell Latitude 7390 2-in-1 Firmware<1.35.0
Dell Latitude 7390 2-in-1
All of the following
Dell Latitude 7414 Rugged Firmware<1.46.0
Dell Latitude 7414 Rugged
All of the following
Dell Latitude 7424 Rugged Extreme Firmware<1.32.0
Dell Latitude 7424 Rugged Extreme
All of the following
Dell Latitude 7480 Firmware<1.37.0
Dell Latitude 7480
All of the following
Dell Latitude 7490 Firmware<1.38.0
Dell Latitude 7490
All of the following
Dell Optiplex 3050 Firmware<1.30.0
Dell OptiPlex 3050
All of the following
Dell Optiplex 3050 All-in-one Firmware<1.32.0
Dell Optiplex 3050 All-in-one
All of the following
Dell Optiplex 5050 Firmware<1.30.0
Dell Optiplex 5050
All of the following
Dell Optiplex 7450 All-in-one Firmware<1.32.0
Dell Optiplex 7450 All-in-one
All of the following
Dell Precision 3420 Tower Firmware<2.30.0
Dell Precision 3420 Tower
All of the following
Dell Precision 3520 Firmware<1.36.0
Dell Precision 3520
All of the following
Dell Precision 3620 Tower Firmware<2.30.0
Dell Precision 3620 Tower
All of the following
Dell Precision 5520 Firmware<1.38.0
Dell Precision 5520
All of the following
Dell Precision 5530 2-in-1 Firmware<1.31.8
Dell Precision 5530 2-in-1
All of the following
Dell Precision 7520 Firmware<1.36.0
Dell Precision 7520
All of the following
Dell Precision 7720 Firmware<1.36.0
Dell Precision 7720
All of the following
Dell Wyse 5070 Firmware<1.31.0
Dell Wyse 5070
All of the following
Dell Wyse 7040 Thin Client Firmware<1.25.0
Dell Wyse 7040 Thin Client
Event History
May 17, 2024
CVE Published
via MITRE·03:20 PM
Data Sourced
via MITRE·03:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-22429?
The severity of CVE-2024-22429 is not explicitly rated but involves a local authenticated malicious user exploiting improper input validation for arbitrary code execution.
2
How do I fix CVE-2024-22429?
To fix CVE-2024-22429, it is recommended to update the Dell BIOS to the latest version provided by Dell.
3
Who is affected by CVE-2024-22429?
CVE-2024-22429 affects various Dell BIOS versions across multiple Dell product lines including Latitude, Precision, and OptiPlex.
4
What are the potential impacts of exploiting CVE-2024-22429?
Exploiting CVE-2024-22429 could lead to arbitrary code execution by an authenticated attacker with admin privileges.
5
When was CVE-2024-22429 disclosed?
CVE-2024-22429 was disclosed as part of Dell's security advisory in 2024.