Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-09-10	CVE-2024-42425	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dell 7920 XL Firmware and Precision 7920 Firmware Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. local low complexity dell CWE-119	5.5
2023-11-16	CVE-2023-32469	Improper Input Validation vulnerability in Dell products Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. local low complexity dell CWE-20	6.7
2021-11-12	CVE-2021-36323	Improper Input Validation vulnerability in Dell products Dell BIOS contains an improper input validation vulnerability. local low complexity dell CWE-20	6.7
2021-11-12	CVE-2021-36324	Improper Input Validation vulnerability in Dell products Dell BIOS contains an improper input validation vulnerability. local low complexity dell CWE-20	6.7
2021-11-12	CVE-2021-36325	Improper Input Validation vulnerability in Dell products Dell BIOS contains an improper input validation vulnerability. local low complexity dell CWE-20	6.7
2021-06-14	CVE-2021-21554	Out-of-bounds Write vulnerability in Dell products Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. local low complexity dell CWE-787	6.7
2020-06-10	CVE-2020-5362	Missing Authorization vulnerability in Dell products Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values. local low complexity dell CWE-862	4.4
2020-02-21	CVE-2020-5326	Missing Authentication for Critical Function vulnerability in Dell products Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. low complexity dell CWE-306	5.3
2019-08-05	CVE-2019-3717	Unspecified vulnerability in Dell products Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. low complexity dell	6.8