ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-26861

—
CVSS 3.1
7.8 high
EPSS
<1%p13
Published
()
Modified
Description

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.

Vendors
dell
Products
alienware m15 r6 firmware, chengming 3980 firmware, chengming 3988 firmware, chengming 3990 firmware, chengming 3991 firmware, g15 5510 firmware, g15 5511 firmware, g3 15 3590 firmware, g3 3500 firmware, g3 3579 firmware, g5 15 5587 firmware, g5 15 5590 firmware
Weakness
CWE-1038
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.