Precision 3520 Firmware
Vendor:
First CVE: Aug 5, 2019 · Active for 6 years
56
Total CVEs
More Total CVEs than 98% of tracked products
9.3
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 37% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Precision 3520 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 5, 2019
6 years ago
Most Recent CVE
Aug 14, 2024
713 days ago
CVE Severity & Scoring
Precision 3520 Firmware56 CVEs
79%
21%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local51 (91.1%)
Network1 (1.8%)
Unknown0 (0.0%)
Physical4 (7.1%)
Adjacent Network0 (0.0%)
Attack Complexity
Low53 (94.6%)
High3 (5.4%)
Unknown0 (0.0%)
User Interaction
None56 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low12 (21.4%)
High42 (75.0%)
None2 (3.6%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (56 CVEs).
56 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-32493HIGH Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary c | Oct 12, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-32491HIGH Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitr | Oct 12, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-32489HIGH Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary cod | Oct 12, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-32488HIGH Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary cod | Oct 12, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-32485HIGH Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary cod | Oct 12, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-26860HIGH Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security chec | Sep 6, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-26858HIGH Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input | Sep 6, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-26861HIGH Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SM | Sep 6, 2022 | 7.8 | 24 | NO | NO |
CVE-2022-22566HIGH Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may p | Feb 9, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-26859HIGH Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SM | Sep 6, 2022 | 7.0 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (56 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (56 CVEs).
Media Mentions
Signals from CVEs in this product scope (56 CVEs).
Top CNAs Publishing CVEs For Precision 3520 Firmware
Top CWEs
Versions
No cataloged versions.