CVE-2022-26864

Description

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.

Related CPE's

odellalienware_m15_r5_firmware********

hdellalienware_m15_r5-*******

odellg15_5515_firmware********

hdellg15_5515-*******

odellg5_se_5505_firmware********

hdellg5_se_5505-*******

odellinspiron_27_7775_firmware********

hdellinspiron_27_7775-*******

odellinspiron_14_5425_firmware********

hdellinspiron_14_5425-*******

References

https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096

Vendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

AccessComplexity

LOW

ConfidentialityImpact

COMPLETE

AvailabilityImpact

COMPLETE

IntegrityImpact

COMPLETE

BaseScore

7.199999809265137

VectorString

AV:L/AC:L/Au:N/C:C/I:C/A:C

Version

2.0

AccessVector

LOCAL

Authentication

NONE

Created by Yello
About Severity.io