{"id":"CVE-2022-24410","state":"PUBLISHED","title":"CVE-2022-24410","description":"\nDell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.\n\n","publishedAt":"2023-02-10T10:34:58.416Z","updatedAt":"2025-03-24T18:36:15.215Z","severity":{"score":6.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","source":"dell"},"assigner":"dell","products":["Dell CPG BIOS"],"affected":[{"vendor":"Dell","product":"CPG BIOS","defaultStatus":"unaffected","versions":[{"version":"All supported versions","status":"affected"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000205719/dsa-2022-325"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T19:49:43.915Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/24xxx/CVE-2022-24410.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-24410","state":"PUBLISHED","datePublished":"2023-02-10T10:34:58.416Z","dateUpdated":"2025-03-24T18:36:15.215Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2022-02-04T16:25:06.379Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"\nDell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.\n\n"}],"affected":[{"vendor":"Dell","product":"CPG BIOS","defaultStatus":"unaffected","versions":[{"version":"All supported versions","status":"affected"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000205719/dsa-2022-325","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2023-02-10T10:34:58.416Z"},"datePublic":"2022-12-13T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000205719/dsa-2022-325","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T04:13:55.264Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-24T15:12:14.188304Z","id":"CVE-2022-24410","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-24T18:36:15.215Z"}}]}}}