Dell Chengming 3991 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Chengming 3991 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (61)

• CVE-2022-32489 — CVSS 8.2 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2022-32488 — CVSS 8.2 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2024-52541 — CVSS 8.2 (high): Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially…
• CVE-2022-26861 — CVSS 7.9 (high): Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this…
• CVE-2021-36324 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2021-36325 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2021-36342 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2021-36343 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2022-34398 — CVSS 7.5 (high): Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this…
• CVE-2022-32487 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2022-26860 — CVSS 7.5 (high): Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending…
• CVE-2022-32485 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2021-36283 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2021-36323 — CVSS 7.5 (high): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2021-21573 — CVSS 7.2 (high): Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system…
• CVE-2021-21574 — CVSS 7.2 (high): Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system…
• CVE-2021-21572 — CVSS 7.2 (high): Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system…
• CVE-2020-5362 — CVSS 7.1 (high): Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which…
• CVE-2022-22566 — CVSS 6.9 (medium): Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker…
• CVE-2023-28075 — CVSS 6.9 (medium): Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the…
• CVE-2022-29083 — CVSS 6.8 (medium): Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system…
• CVE-2022-24410 — CVSS 6.8 (medium): Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and…
• CVE-2023-43078 — CVSS 6.7 (medium): Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary…
• CVE-2023-28063 — CVSS 6.7 (medium): Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could…
• CVE-2022-26859 — CVSS 6.1 (medium): Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in…
• CVE-2022-26858 — CVSS 6.1 (medium): Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this…
• CVE-2022-32493 — CVSS 6.0 (medium): Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this…
• CVE-2021-21571 — CVSS 5.9 (medium): Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate…
• CVE-2022-32483 — CVSS 5.6 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially…
• CVE-2022-32484 — CVSS 5.6 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially…
• CVE-2023-28060 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-25936 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-25937 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-25938 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28026 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28027 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28028 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28029 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28030 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28031 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28032 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28033 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28034 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28035 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28036 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28039 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28040 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28041 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28042 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28044 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28050 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28052 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28054 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28056 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28058 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28059 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2023-28061 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may…
• CVE-2024-0158 — CVSS 5.1 (medium): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially…
• CVE-2022-22567 — CVSS 4.7 (medium): Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An…
• CVE-2024-22448 — CVSS 4.7 (medium): Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially…
• CVE-2022-32491 — CVSS 4.1 (medium): Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability…