CVE-2022-26862
—CVSS 3.1
7.8 high
EPSS
<1%p19
Published
()
Modified
Description
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
- Vendors
- dell
- Products
- alienware m15 r5 firmware, g15 5515 firmware, g5 se 5505 firmware, inspiron 27 7775 firmware, inspiron 14 5425 firmware, inspiron 3275 firmware, inspiron 3475 firmware, inspiron 3180 firmware, inspiron 3185 firmware, inspiron 3195 firmware, inspiron 3505 firmware, inspiron 3515 firmware
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.