CVE-2022-26862
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - security_alert@emc.com
- Published
- 2022-06-23
- Last modified
- 2024-09-16
- Weaknesses
- CWE-20
Affected products
- Alienware M15 R5 Firmware (Dell)
- Cpg Bios (Dell)
- G15 5515 Firmware (Dell)
- G5 Se 5505 Firmware (Dell)
- Inspiron 14 5425 Firmware (Dell)
- Inspiron 27 7775 Firmware (Dell)
- Inspiron 3180 Firmware (Dell)
- Inspiron 3185 Firmware (Dell)
- Inspiron 3195 Firmware (Dell)
- Inspiron 3275 Firmware (Dell)
- Inspiron 3475 Firmware (Dell)
- Inspiron 3505 Firmware (Dell)
- Inspiron 3515 Firmware (Dell)
- Inspiron 3525 Firmware (Dell)
- Inspiron 3585 Firmware (Dell)
- Inspiron 3595 Firmware (Dell)
- Inspiron 3785 Firmware (Dell)
- Inspiron 5405 Firmware (Dell)
- Inspiron 5415 All-in-one Firmware (Dell)
- Inspiron 5415 Firmware (Dell)
- Inspiron 5485 Firmware (Dell)
- Inspiron 5505 Firmware (Dell)
- Inspiron 5515 Firmware (Dell)
- Inspiron 5575 Firmware (Dell)
- Inspiron 5585 Firmware (Dell)
- Inspiron 7375 Firmware (Dell)
- Inspiron 7405 Firmware (Dell)
- Inspiron 7415 Firmware (Dell)
- Inspiron 7425 Firmware (Dell)
- Vostro 3405 Firmware (Dell)
- Vostro 3515 Firmware (Dell)
- Vostro 3525 Firmware (Dell)
- Vostro 5415 Firmware (Dell)
- Vostro 5515 Firmware (Dell)
- Vostro 5625 Firmware (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096
