CVE-2022-32490
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - security_alert@emc.com
- Published
- 2023-01-18
- Last modified
- 2025-04-03
- Weaknesses
- CWE-20
Affected products
- Bios (Dell)
- Edge Gateway 3000 Firmware (Dell)
- Edge Gateway 5000 Firmware (Dell)
- Embedded Box Pc 3000 Firmware (Dell)
References
- https://www.dell.com/support/kbdoc/000204685
