Back to feed
EUVD-2022-29309 · Published May 26, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
Technologies
Dell Inspiron 3505Dell Dell G5 5505Dell Vostro 3405Dell Inspiron 3515Dell Inspiron 5675 FirmwareDell Inspiron 5775 FirmwareDell Vostro 3515 FirmwareDell Inspiron 3180 FirmwareDell Inspiron 3595 FirmwareDell Vostro 5515Dell Inspiron 27 7775Dell Vostro 3405 FirmwareDell Inspiron 5505 FirmwareDell Inspiron 5575 FirmwareDell Inspiron 5415Dell Inspiron 3185Dell Inspiron 24-3475Dell Inspiron 7415 FirmwareDell Inspiron 7405Dell Inspiron 7415Dell Inspiron 24-3475 FirmwareDell Inspiron 5575Dell Inspiron 7405 FirmwareDell Inspiron 5485 FirmwareDell Inspiron 5515 FirmwareDell Inspiron 7375Dell Inspiron 3505 FirmwareDell Vostro 3515Dell Inspiron 3195Dell Inspiron 7375 FirmwareDell Inspiron 3585Dell Inspiron 3785Dell Inspiron 5775Dell Vostro 5415 FirmwareDell Inspiron 5585 FirmwareDell Dell G5 5505 FirmwareDell Vostro 5415Dell Inspiron 3180Dell Inspiron 3785 FirmwareDell Inspiron 5515Dell Inspiron 3185 FirmwareDell Inspiron 5485Dell Inspiron 5505Dell Inspiron 3195 FirmwareDell Inspiron 5675Dell Inspiron 22-3275 FirmwareDell Inspiron 3595Dell Inspiron 3585 FirmwareDell Inspiron 22-3275Dell Vostro 5515 FirmwareDell Inspiron 5585Dell Inspiron 5405 FirmwareDell Inspiron 5405Dell Inspiron 27 7775 FirmwareDell Inspiron 3515 FirmwareDell Inspiron 5415 Firmware
Weaknesses
CWE-20
CVSS scores
- v3.16.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - v2.07.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
