What is CVE-2022-24410?

CVE-2022-24410 is a medium-severity vulnerability in Dell Alienware_13_r2, classified under Information Disclosure. CVSS score: 6.8/10. Published 2023-02-10.

How severe is CVE-2022-24410?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Information disclosure in Dell Alienware_13_r2

CVE-2022-24410

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system informati…

Vulnerability class: Information Disclosure

EPSS: 0.002 (6.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H.

Affected products

Dell Alienware_13_r2
Dell Alienware_13_r2_firmware
Dell Alienware_13_r3
Dell Alienware_13_r3_firmware
Dell Alienware_15_r2
Dell Alienware_15_r2_firmware
Dell Alienware_15_r3
Dell Alienware_15_r3_firmware
Dell Alienware_15_r4
Dell Alienware_15_r4_firmware

Weakness classification (CWE)

CWE-200 — Information Disclosure
CWE-312 — Cleartext Storage of Sensitive Information

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2022-24410?: CVE-2022-24410 is a medium-severity vulnerability in Dell Alienware_13_r2, classified under Information Disclosure. CVSS score: 6.8/10. Published 2023-02-10.
How severe is CVE-2022-24410?: Medium severity. CVSS v3 base score is 6.8 out of 10.