All the vulnerabilites related to dell - inspiron_14_5425_firmware
cve-2022-26864
Vulnerability from cvelistv5
Published
2022-06-23 17:55
Modified
2024-09-16 20:11
Severity ?
EPSS score ?
Summary
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
References
▼ | URL | Tags |
---|---|---|
https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096 | x_refsource_MISC |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T05:18:37.807Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "CPG BIOS", "vendor": "Dell", "versions": [ { "lessThan": "1.5.0", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "datePublic": "2022-06-21T00:00:00", "descriptions": [ { "lang": "en", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-20", "description": "CWE-20: Improper Input Validation", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2022-06-23T17:55:15", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secure@dell.com", "DATE_PUBLIC": "2022-06-21", "ID": "CVE-2022-26864", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "CPG BIOS", "version": { "version_data": [ { "version_affected": "\u003c", "version_value": "1.5.0" } ] } } ] }, "vendor_name": "Dell" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." } ] }, "impact": { "cvss": { "baseScore": 6.3, "baseSeverity": "Medium", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-20: Improper Input Validation" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096", "refsource": "MISC", "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ] } } } }, "cveMetadata": { "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2022-26864", "datePublished": "2022-06-23T17:55:15.134018Z", "dateReserved": "2022-03-10T00:00:00", "dateUpdated": "2024-09-16T20:11:27.156Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-32475
Vulnerability from cvelistv5
Published
2024-06-07 02:13
Modified
2024-08-02 15:18
Severity ?
EPSS score ?
Summary
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
References
Impacted products
{ "containers": { "adp": [ { "affected": [ { "cpes": [ "cpe:2.3:o:dell:cpg_bios:*:*:*:*:*:*:*:*" ], "defaultStatus": "affected", "product": "cpg_bios", "vendor": "dell", "versions": [ { "lessThanOrEqual": "2.6", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "metrics": [ { "other": { "content": { "id": "CVE-2023-32475", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2024-06-07T16:59:56.060370Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-06-07T17:00:46.144Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" }, { "providerMetadata": { "dateUpdated": "2024-08-02T15:18:37.099Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "CPG BIOS", "vendor": "Dell", "versions": [ { "lessThan": "2.6.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.13.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "2.16.0", "status": "unaffected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.15.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.16.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.9.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.5.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.18.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.8.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.15.1", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.12.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.17.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.14.0", "status": "affected", "version": "N/A", "versionType": "semver" }, { "lessThan": "1.19.0", "status": "affected", "version": "N/A", "versionType": "semver" } ] } ], "datePublic": "2023-12-12T06:30:00.000Z", "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system." } ], "value": "Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-353", "description": "CWE-353: Missing Support for Integrity Check", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-06-07T02:13:17.515Z", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.2.0" } } }, "cveMetadata": { "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2023-32475", "datePublished": "2024-06-07T02:13:17.515Z", "dateReserved": "2023-05-09T06:07:41.365Z", "dateUpdated": "2024-08-02T15:18:37.099Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-26863
Vulnerability from cvelistv5
Published
2022-06-23 17:55
Modified
2024-09-16 20:48
Severity ?
EPSS score ?
Summary
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
References
▼ | URL | Tags |
---|---|---|
https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096 | x_refsource_MISC |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T05:18:37.835Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "CPG BIOS", "vendor": "Dell", "versions": [ { "lessThan": "1.5.0", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "datePublic": "2022-06-21T00:00:00", "descriptions": [ { "lang": "en", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-20", "description": "CWE-20: Improper Input Validation", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2022-06-23T17:55:13", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secure@dell.com", "DATE_PUBLIC": "2022-06-21", "ID": "CVE-2022-26863", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "CPG BIOS", "version": { "version_data": [ { "version_affected": "\u003c", "version_value": "1.5.0" } ] } } ] }, "vendor_name": "Dell" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." } ] }, "impact": { "cvss": { "baseScore": 6.3, "baseSeverity": "Medium", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-20: Improper Input Validation" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096", "refsource": "MISC", "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ] } } } }, "cveMetadata": { "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2022-26863", "datePublished": "2022-06-23T17:55:13.573946Z", "dateReserved": "2022-03-10T00:00:00", "dateUpdated": "2024-09-16T20:48:18.563Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-26862
Vulnerability from cvelistv5
Published
2022-06-23 17:55
Modified
2024-09-16 17:49
Severity ?
EPSS score ?
Summary
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
References
▼ | URL | Tags |
---|---|---|
https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096 | x_refsource_MISC |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T05:18:37.913Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "CPG BIOS", "vendor": "Dell", "versions": [ { "lessThan": "1.5.0", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "datePublic": "2022-06-21T00:00:00", "descriptions": [ { "lang": "en", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-20", "description": "CWE-20: Improper Input Validation", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2022-06-23T17:55:11", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secure@dell.com", "DATE_PUBLIC": "2022-06-21", "ID": "CVE-2022-26862", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "CPG BIOS", "version": { "version_data": [ { "version_affected": "\u003c", "version_value": "1.5.0" } ] } } ] }, "vendor_name": "Dell" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." } ] }, "impact": { "cvss": { "baseScore": 6.3, "baseSeverity": "Medium", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-20: Improper Input Validation" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096", "refsource": "MISC", "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ] } } } }, "cveMetadata": { "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2022-26862", "datePublished": "2022-06-23T17:55:12.018068Z", "dateReserved": "2022-03-10T00:00:00", "dateUpdated": "2024-09-16T17:49:05.234Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
Vulnerability from fkie_nvd
Published
2022-06-23 18:15
Modified
2024-11-21 06:54
Severity ?
6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m15_r5_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB881BAC-B62A-483D-B9E8-C25AA51A5B9E", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m15_r5:-:*:*:*:*:*:*:*", "matchCriteriaId": "489E5D0F-11D9-4211-8457-7D06DB447D71", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g15_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B9C8F088-C8DA-4CAF-8E27-97F885E6B4CF", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g15_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DD6D554-0CEC-411C-9D44-A0F3AE3D3A07", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g5_se_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "97836DDF-EA91-4DB4-BD04-F379C66772F4", "versionEndExcluding": "1.11.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g5_se_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "E98A4646-E3CD-4664-881D-284DB263CC18", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_27_7775_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F15F0FA-320E-4F0D-AE26-4A3A48FDD171", "versionEndExcluding": "2.16.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_27_7775:-:*:*:*:*:*:*:*", "matchCriteriaId": "773EB218-753B-44D8-92F2-F902E2BF7933", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_14_5425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B5C71379-2C97-47B5-888D-F936A2AD2B59", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_14_5425:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2439A92-05B4-4654-A459-AC2E87745FFF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3275_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E447B458-2888-4109-97F7-E5CB2EB72687", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3275:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D35B707-6168-4C83-88AD-61105B56EFAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3475_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "346B6E91-076E-4466-A63C-EFC0FF981BEB", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3475:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2DBC7DD-5091-4B2D-A52B-A3D6A9332202", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3180_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "86A5FD1A-B537-4FEF-B0D6-BC6A658A8B8D", "versionEndExcluding": "1.4.4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3180:-:*:*:*:*:*:*:*", "matchCriteriaId": "033EB741-AC21-472C-AE91-D58CAD9B7354", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3185_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51586736-F6E0-4BF5-948C-252CBA506A0D", "versionEndExcluding": "1.4.4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3185:-:*:*:*:*:*:*:*", "matchCriteriaId": "B547563E-6AB1-40DD-AA96-9B4D12CAED05", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3195_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AD04459-B6A3-4C8C-99FD-90C92839C4A8", "versionEndExcluding": "1.4.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3195:-:*:*:*:*:*:*:*", "matchCriteriaId": "F60A87A1-BF28-4426-92C8-F16B5B311496", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C4256E7C-6E04-4F7F-829B-4F5B2CDD38D1", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3505:-:*:*:*:*:*:*:*", "matchCriteriaId": "3137C79A-EE16-4B4E-95D8-6CF1E1E9A4CD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E155F1D4-790F-41F2-BEEB-3B17238306D9", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC360757-EECE-40F5-8BA9-098F8F121C3B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5A605672-72B8-4F11-AE9E-20B2620C3292", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE71AD60-5FA8-4004-BE98-2E22A6352589", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3585_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7D791F9D-2629-4BAE-85EB-EEB124650E38", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3585:-:*:*:*:*:*:*:*", "matchCriteriaId": "52CE5DAC-381B-4B20-AD92-C427B0ECB4BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3595_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B33FB274-3690-45AD-8337-63055B8ACF7C", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3595:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F3F07F9-AAC0-4537-87A3-549595DF9669", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3785_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DD722C6-2DE5-4436-8E43-16AD37998815", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3785:-:*:*:*:*:*:*:*", "matchCriteriaId": "0609B2B8-704B-4804-BE0B-FDE177FDBA83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "186A160E-8475-4B49-8DE6-A7EB09E103BD", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5405:-:*:*:*:*:*:*:*", "matchCriteriaId": "2ED5439F-1A3C-4F5F-98C7-B2C471919477", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF58F2E5-D544-4DE3-BE9C-D06E9FAE551D", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "1563D5D8-CD81-4EE5-AE6F-6939C353377B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5415_all-in-one_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AEBFE07-3D90-438B-9140-B6BE0F6BC310", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5415_all-in-one:-:*:*:*:*:*:*:*", "matchCriteriaId": "495768A4-96F9-48EC-8DCD-375C0599E972", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5485_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF0CF6A8-145A-4C77-9E1E-D5281D3D0439", "versionEndExcluding": "2.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5485:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D51C6DC-9838-411B-8D68-3AFE3C816CAC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A0A21694-2D39-4ACD-8A4F-CE9FB27BCFF3", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "84379684-0B62-44BB-A53E-04C95CA09ED5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "118BC3D3-C619-401B-9A48-DDEAA67BB3B0", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "F05114EB-E200-4F8B-8D18-41AC80540F29", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5575_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FB06398A-24F0-413F-AEC5-E26EF213CA85", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5575:-:*:*:*:*:*:*:*", "matchCriteriaId": "14F80F87-DDE1-456E-A35E-1408F0E8309B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5585_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B84B0D4C-C2C2-4983-BD83-0FF1E3E244B8", "versionEndExcluding": "2.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5585:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF54DE0B-E8CA-41B8-9610-800BE70DBC5D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7375_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7D57DD3-4F66-436F-8056-14AA97B17679", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7375:-:*:*:*:*:*:*:*", "matchCriteriaId": "F95AF04F-A204-4341-9765-A8B5000A1D35", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E9E9011-AC68-44CC-B3AE-03C119A875B4", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7405:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FC3DAAF-5B9E-4EFC-A809-4BCB12D810A8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1DA5CBE2-5028-4CED-B965-E6626F1C981C", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7415:-:*:*:*:*:*:*:*", "matchCriteriaId": "327A491D-EEEE-466E-98A8-1895C5A24996", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD77EA89-282E-4EB7-B2E0-C18B278F87F0", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7425:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBB4B698-7054-4DCD-8D83-E0200D076F3E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "65652F70-8D08-483C-9946-1005E3DD9DEB", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3405:-:*:*:*:*:*:*:*", "matchCriteriaId": "79142A75-EA84-4C9A-861B-0FF10E21450B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92940015-4F5C-4892-8161-8A4498D0B2F6", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2699C29-2162-4F2C-83AE-94BBB865885A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C88B5A8E-B53A-442E-8FD8-AAADB7F05F71", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC3A2DA7-1099-4711-9D25-18820CD0EF01", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8DE60163-CB51-4218-96FA-1E1D5223CA6E", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DC7AFBA-3492-44A7-9D78-51FD20C985F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA50D497-E578-43AA-A035-E35A31A232F0", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "3EB96F99-DE8C-4344-BBB2-12AD92CE98A0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5625_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5F6F719E-A2A4-4D57-BF57-ACC067DBE0CC", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5625:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CB00804-D39C-4A1B-9762-A7249C4EA753", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." }, { "lang": "es", "value": "Las versiones anteriores de Dell BIOS contienen una vulnerabilidad de comprobaci\u00f3n de entradas. Un usuario malicioso autenticado localmente podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo de informaci\u00f3n maliciosa a un SMI para omitir los controles de seguridad de SMM" } ], "id": "CVE-2022-26862", "lastModified": "2024-11-21T06:54:41.870", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 5.5, "source": "security_alert@emc.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-06-23T18:15:07.817", "references": [ { "source": "security_alert@emc.com", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "security_alert@emc.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2022-06-23 18:15
Modified
2024-11-21 06:54
Severity ?
6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m15_r5_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB881BAC-B62A-483D-B9E8-C25AA51A5B9E", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m15_r5:-:*:*:*:*:*:*:*", "matchCriteriaId": "489E5D0F-11D9-4211-8457-7D06DB447D71", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g15_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B9C8F088-C8DA-4CAF-8E27-97F885E6B4CF", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g15_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DD6D554-0CEC-411C-9D44-A0F3AE3D3A07", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g5_se_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "97836DDF-EA91-4DB4-BD04-F379C66772F4", "versionEndExcluding": "1.11.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g5_se_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "E98A4646-E3CD-4664-881D-284DB263CC18", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_27_7775_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F15F0FA-320E-4F0D-AE26-4A3A48FDD171", "versionEndExcluding": "2.16.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_27_7775:-:*:*:*:*:*:*:*", "matchCriteriaId": "773EB218-753B-44D8-92F2-F902E2BF7933", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_14_5425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B5C71379-2C97-47B5-888D-F936A2AD2B59", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_14_5425:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2439A92-05B4-4654-A459-AC2E87745FFF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3275_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E447B458-2888-4109-97F7-E5CB2EB72687", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3275:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D35B707-6168-4C83-88AD-61105B56EFAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3475_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "346B6E91-076E-4466-A63C-EFC0FF981BEB", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3475:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2DBC7DD-5091-4B2D-A52B-A3D6A9332202", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3180_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "86A5FD1A-B537-4FEF-B0D6-BC6A658A8B8D", "versionEndExcluding": "1.4.4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3180:-:*:*:*:*:*:*:*", "matchCriteriaId": "033EB741-AC21-472C-AE91-D58CAD9B7354", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3185_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51586736-F6E0-4BF5-948C-252CBA506A0D", "versionEndExcluding": "1.4.4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3185:-:*:*:*:*:*:*:*", "matchCriteriaId": "B547563E-6AB1-40DD-AA96-9B4D12CAED05", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3195_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AD04459-B6A3-4C8C-99FD-90C92839C4A8", "versionEndExcluding": "1.4.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3195:-:*:*:*:*:*:*:*", "matchCriteriaId": "F60A87A1-BF28-4426-92C8-F16B5B311496", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C4256E7C-6E04-4F7F-829B-4F5B2CDD38D1", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3505:-:*:*:*:*:*:*:*", "matchCriteriaId": "3137C79A-EE16-4B4E-95D8-6CF1E1E9A4CD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E155F1D4-790F-41F2-BEEB-3B17238306D9", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC360757-EECE-40F5-8BA9-098F8F121C3B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5A605672-72B8-4F11-AE9E-20B2620C3292", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE71AD60-5FA8-4004-BE98-2E22A6352589", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3585_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7D791F9D-2629-4BAE-85EB-EEB124650E38", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3585:-:*:*:*:*:*:*:*", "matchCriteriaId": "52CE5DAC-381B-4B20-AD92-C427B0ECB4BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3595_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B33FB274-3690-45AD-8337-63055B8ACF7C", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3595:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F3F07F9-AAC0-4537-87A3-549595DF9669", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3785_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DD722C6-2DE5-4436-8E43-16AD37998815", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3785:-:*:*:*:*:*:*:*", "matchCriteriaId": "0609B2B8-704B-4804-BE0B-FDE177FDBA83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "186A160E-8475-4B49-8DE6-A7EB09E103BD", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5405:-:*:*:*:*:*:*:*", "matchCriteriaId": "2ED5439F-1A3C-4F5F-98C7-B2C471919477", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF58F2E5-D544-4DE3-BE9C-D06E9FAE551D", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "1563D5D8-CD81-4EE5-AE6F-6939C353377B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5415_all-in-one_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AEBFE07-3D90-438B-9140-B6BE0F6BC310", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5415_all-in-one:-:*:*:*:*:*:*:*", "matchCriteriaId": "495768A4-96F9-48EC-8DCD-375C0599E972", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5485_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF0CF6A8-145A-4C77-9E1E-D5281D3D0439", "versionEndExcluding": "2.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5485:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D51C6DC-9838-411B-8D68-3AFE3C816CAC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A0A21694-2D39-4ACD-8A4F-CE9FB27BCFF3", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "84379684-0B62-44BB-A53E-04C95CA09ED5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "118BC3D3-C619-401B-9A48-DDEAA67BB3B0", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "F05114EB-E200-4F8B-8D18-41AC80540F29", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5575_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FB06398A-24F0-413F-AEC5-E26EF213CA85", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5575:-:*:*:*:*:*:*:*", "matchCriteriaId": "14F80F87-DDE1-456E-A35E-1408F0E8309B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5585_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B84B0D4C-C2C2-4983-BD83-0FF1E3E244B8", "versionEndExcluding": "2.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5585:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF54DE0B-E8CA-41B8-9610-800BE70DBC5D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7375_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7D57DD3-4F66-436F-8056-14AA97B17679", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7375:-:*:*:*:*:*:*:*", "matchCriteriaId": "F95AF04F-A204-4341-9765-A8B5000A1D35", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E9E9011-AC68-44CC-B3AE-03C119A875B4", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7405:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FC3DAAF-5B9E-4EFC-A809-4BCB12D810A8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1DA5CBE2-5028-4CED-B965-E6626F1C981C", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7415:-:*:*:*:*:*:*:*", "matchCriteriaId": "327A491D-EEEE-466E-98A8-1895C5A24996", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD77EA89-282E-4EB7-B2E0-C18B278F87F0", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7425:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBB4B698-7054-4DCD-8D83-E0200D076F3E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "65652F70-8D08-483C-9946-1005E3DD9DEB", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3405:-:*:*:*:*:*:*:*", "matchCriteriaId": "79142A75-EA84-4C9A-861B-0FF10E21450B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92940015-4F5C-4892-8161-8A4498D0B2F6", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2699C29-2162-4F2C-83AE-94BBB865885A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C88B5A8E-B53A-442E-8FD8-AAADB7F05F71", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC3A2DA7-1099-4711-9D25-18820CD0EF01", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8DE60163-CB51-4218-96FA-1E1D5223CA6E", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DC7AFBA-3492-44A7-9D78-51FD20C985F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA50D497-E578-43AA-A035-E35A31A232F0", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "3EB96F99-DE8C-4344-BBB2-12AD92CE98A0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5625_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5F6F719E-A2A4-4D57-BF57-ACC067DBE0CC", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5625:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CB00804-D39C-4A1B-9762-A7249C4EA753", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." }, { "lang": "es", "value": "Las versiones anteriores de Dell BIOS contienen una vulnerabilidad de comprobaci\u00f3n de entrada. Un usuario malicioso autenticado localmente podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo de entradas maliciosas a un SMI para omitir los controles de seguridad en el SMM" } ], "id": "CVE-2022-26864", "lastModified": "2024-11-21T06:54:42.180", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 5.5, "source": "security_alert@emc.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-06-23T18:15:07.943", "references": [ { "source": "security_alert@emc.com", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "security_alert@emc.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2022-06-23 18:15
Modified
2024-11-21 06:54
Severity ?
6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m15_r5_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB881BAC-B62A-483D-B9E8-C25AA51A5B9E", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m15_r5:-:*:*:*:*:*:*:*", "matchCriteriaId": "489E5D0F-11D9-4211-8457-7D06DB447D71", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g15_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B9C8F088-C8DA-4CAF-8E27-97F885E6B4CF", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g15_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DD6D554-0CEC-411C-9D44-A0F3AE3D3A07", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g5_se_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "97836DDF-EA91-4DB4-BD04-F379C66772F4", "versionEndExcluding": "1.11.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g5_se_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "E98A4646-E3CD-4664-881D-284DB263CC18", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_27_7775_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F15F0FA-320E-4F0D-AE26-4A3A48FDD171", "versionEndExcluding": "2.16.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_27_7775:-:*:*:*:*:*:*:*", "matchCriteriaId": "773EB218-753B-44D8-92F2-F902E2BF7933", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_14_5425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B5C71379-2C97-47B5-888D-F936A2AD2B59", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_14_5425:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2439A92-05B4-4654-A459-AC2E87745FFF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3275_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E447B458-2888-4109-97F7-E5CB2EB72687", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3275:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D35B707-6168-4C83-88AD-61105B56EFAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3475_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "346B6E91-076E-4466-A63C-EFC0FF981BEB", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3475:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2DBC7DD-5091-4B2D-A52B-A3D6A9332202", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3180_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "86A5FD1A-B537-4FEF-B0D6-BC6A658A8B8D", "versionEndExcluding": "1.4.4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3180:-:*:*:*:*:*:*:*", "matchCriteriaId": "033EB741-AC21-472C-AE91-D58CAD9B7354", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3185_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51586736-F6E0-4BF5-948C-252CBA506A0D", "versionEndExcluding": "1.4.4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3185:-:*:*:*:*:*:*:*", "matchCriteriaId": "B547563E-6AB1-40DD-AA96-9B4D12CAED05", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3195_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AD04459-B6A3-4C8C-99FD-90C92839C4A8", "versionEndExcluding": "1.4.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3195:-:*:*:*:*:*:*:*", "matchCriteriaId": "F60A87A1-BF28-4426-92C8-F16B5B311496", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C4256E7C-6E04-4F7F-829B-4F5B2CDD38D1", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3505:-:*:*:*:*:*:*:*", "matchCriteriaId": "3137C79A-EE16-4B4E-95D8-6CF1E1E9A4CD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E155F1D4-790F-41F2-BEEB-3B17238306D9", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC360757-EECE-40F5-8BA9-098F8F121C3B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5A605672-72B8-4F11-AE9E-20B2620C3292", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE71AD60-5FA8-4004-BE98-2E22A6352589", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3585_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7D791F9D-2629-4BAE-85EB-EEB124650E38", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3585:-:*:*:*:*:*:*:*", "matchCriteriaId": "52CE5DAC-381B-4B20-AD92-C427B0ECB4BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3595_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B33FB274-3690-45AD-8337-63055B8ACF7C", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3595:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F3F07F9-AAC0-4537-87A3-549595DF9669", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3785_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DD722C6-2DE5-4436-8E43-16AD37998815", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3785:-:*:*:*:*:*:*:*", "matchCriteriaId": "0609B2B8-704B-4804-BE0B-FDE177FDBA83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "186A160E-8475-4B49-8DE6-A7EB09E103BD", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5405:-:*:*:*:*:*:*:*", "matchCriteriaId": "2ED5439F-1A3C-4F5F-98C7-B2C471919477", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF58F2E5-D544-4DE3-BE9C-D06E9FAE551D", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "1563D5D8-CD81-4EE5-AE6F-6939C353377B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5415_all-in-one_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AEBFE07-3D90-438B-9140-B6BE0F6BC310", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5415_all-in-one:-:*:*:*:*:*:*:*", "matchCriteriaId": "495768A4-96F9-48EC-8DCD-375C0599E972", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5485_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF0CF6A8-145A-4C77-9E1E-D5281D3D0439", "versionEndExcluding": "2.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5485:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D51C6DC-9838-411B-8D68-3AFE3C816CAC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A0A21694-2D39-4ACD-8A4F-CE9FB27BCFF3", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "84379684-0B62-44BB-A53E-04C95CA09ED5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "118BC3D3-C619-401B-9A48-DDEAA67BB3B0", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "F05114EB-E200-4F8B-8D18-41AC80540F29", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5575_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FB06398A-24F0-413F-AEC5-E26EF213CA85", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5575:-:*:*:*:*:*:*:*", "matchCriteriaId": "14F80F87-DDE1-456E-A35E-1408F0E8309B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5585_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B84B0D4C-C2C2-4983-BD83-0FF1E3E244B8", "versionEndExcluding": "2.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5585:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF54DE0B-E8CA-41B8-9610-800BE70DBC5D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7375_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7D57DD3-4F66-436F-8056-14AA97B17679", "versionEndExcluding": "1.7.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7375:-:*:*:*:*:*:*:*", "matchCriteriaId": "F95AF04F-A204-4341-9765-A8B5000A1D35", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E9E9011-AC68-44CC-B3AE-03C119A875B4", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7405:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FC3DAAF-5B9E-4EFC-A809-4BCB12D810A8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1DA5CBE2-5028-4CED-B965-E6626F1C981C", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7415:-:*:*:*:*:*:*:*", "matchCriteriaId": "327A491D-EEEE-466E-98A8-1895C5A24996", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD77EA89-282E-4EB7-B2E0-C18B278F87F0", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7425:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBB4B698-7054-4DCD-8D83-E0200D076F3E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "65652F70-8D08-483C-9946-1005E3DD9DEB", "versionEndExcluding": "1.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3405:-:*:*:*:*:*:*:*", "matchCriteriaId": "79142A75-EA84-4C9A-861B-0FF10E21450B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92940015-4F5C-4892-8161-8A4498D0B2F6", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2699C29-2162-4F2C-83AE-94BBB865885A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C88B5A8E-B53A-442E-8FD8-AAADB7F05F71", "versionEndExcluding": "1.3.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC3A2DA7-1099-4711-9D25-18820CD0EF01", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8DE60163-CB51-4218-96FA-1E1D5223CA6E", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DC7AFBA-3492-44A7-9D78-51FD20C985F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA50D497-E578-43AA-A035-E35A31A232F0", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "3EB96F99-DE8C-4344-BBB2-12AD92CE98A0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5625_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5F6F719E-A2A4-4D57-BF57-ACC067DBE0CC", "versionEndExcluding": "1.2.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5625:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CB00804-D39C-4A1B-9762-A7249C4EA753", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM." }, { "lang": "es", "value": "Las versiones anteriores de Dell BIOS contienen una vulnerabilidad de comprobaci\u00f3n de entrada. Un usuario malicioso autenticado localmente podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo de entradas maliciosas a un SMI para omitir los controles de seguridad en SMM" } ], "id": "CVE-2022-26863", "lastModified": "2024-11-21T06:54:42.040", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 5.5, "source": "security_alert@emc.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-06-23T18:15:07.880", "references": [ { "source": "security_alert@emc.com", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096" } ], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "security_alert@emc.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-06-07 03:15
Modified
2024-11-21 08:03
Severity ?
7.6 (High) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.6 (High) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.6 (High) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Summary
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5625_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6967CAD7-821C-4909-A6E3-F4A8934D7ED9", "versionEndExcluding": "1.13.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5625:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CB00804-D39C-4A1B-9762-A7249C4EA753", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6CD2B14-0DE3-4B20-BF3F-E919F8AF2F11", "versionEndExcluding": "1.19.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "3EB96F99-DE8C-4344-BBB2-12AD92CE98A0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F505CA5A-5438-4C23-B3D6-5C4764C0E184", "versionEndExcluding": "1.19.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DC7AFBA-3492-44A7-9D78-51FD20C985F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_3405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26E98FFB-840E-49B4-93F9-B53D45BECBD9", "versionEndExcluding": "1.16.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_3405:-:*:*:*:*:*:*:*", "matchCriteriaId": "79142A75-EA84-4C9A-861B-0FF10E21450B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_16_5635_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "01AADB4A-439D-4468-8AC1-59A263C3A402", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_16_5635:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6BA027A-D8C7-478A-8C3B-42B9F722367B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_15_3535_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6B0C7C65-BFC9-49C0-A449-A11958006374", "versionEndExcluding": "1.12.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_15_3535:-:*:*:*:*:*:*:*", "matchCriteriaId": "602150A8-8C3E-4962-889C-5E9051C71667", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_15_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3FD1F48D-7D61-4519-A2FE-6387E0C477C5", "versionEndExcluding": "1.15.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_15_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "EA4B12B8-3686-4DF7-9160-A04D58F58A16", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_15_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AA00B2B-F2D2-47FF-B96D-12D544B1207A", "versionEndExcluding": "1.16.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_15_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "0C66DDCF-85FC-455C-8A31-5CAAD7D92BDB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_14_3435_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD5F9DF4-D9A6-4C28-862F-265E0B235A9D", "versionEndExcluding": "1.12.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_14_3435:-:*:*:*:*:*:*:*", "matchCriteriaId": "90140BF1-C455-495F-A2FA-E0FAF9B0D5AD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:vostro_14_3425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7434C5AF-CCD3-4117-AC56-92B73BDD1355", "versionEndExcluding": "1.15.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:vostro_14_3425:-:*:*:*:*:*:*:*", "matchCriteriaId": "3FCE2FED-41E1-4CE3-AE9B-2F73F04925D0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7415_2-in-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "107A2C1E-6F71-4112-A893-05FB3D725067", "versionEndExcluding": "1.19.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7415_2-in-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFBBD87A-97E6-4EBB-8B04-0E343A6D3FF5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_7405_2-in-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B75E196-A7EE-471C-8966-2D358B520A26", "versionEndExcluding": "1.15.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_7405_2-in-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "A723A28B-2CED-4A1A-B36C-82E9ABDE58E3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F23FCEA-96B0-4F35-988B-88817D3C25DA", "versionEndExcluding": "1.19.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "F05114EB-E200-4F8B-8D18-41AC80540F29", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DB9A42C5-671F-4796-8E49-E61A97B61169", "versionEndExcluding": "1.14.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "84379684-0B62-44BB-A53E-04C95CA09ED5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F2A24064-14F3-47F1-92AC-6D7A6AFF0137", "versionEndExcluding": "1.19.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5415:-:*:*:*:*:*:*:*", "matchCriteriaId": "1563D5D8-CD81-4EE5-AE6F-6939C353377B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_5405_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3065917D-3E56-4BC0-B7BD-2351FB0E6216", "versionEndExcluding": "1.14.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_5405:-:*:*:*:*:*:*:*", "matchCriteriaId": "2ED5439F-1A3C-4F5F-98C7-B2C471919477", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_3505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0FA188A3-4971-447D-8B57-A474A6D64F5D", "versionEndExcluding": "1.16.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_3505:-:*:*:*:*:*:*:*", "matchCriteriaId": "3137C79A-EE16-4B4E-95D8-6CF1E1E9A4CD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_24_5415_all-in-one_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC3B1267-2BEF-49E6-83E5-3D3CECD21621", "versionEndExcluding": "1.17.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_24_5415_all-in-one:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE0899CC-0FFF-4CD6-B39E-6A90E3D4183A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_16_7635_2-in-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0059B1F1-5C6F-4CDB-9D3A-9F06B93EDC65", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_16_7635_2-in-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "40C9F472-97F7-438A-8CAC-B9B3A85413BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_16_5635_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "32998813-4D00-44B9-BF6C-ED53B45DE3BD", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_16_5635:-:*:*:*:*:*:*:*", "matchCriteriaId": "4157A8EE-8838-4A87-A5AF-2EE1B0D03AEE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_16_5625_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E5BCAC9-6285-4965-9E19-21DCDD34B8A9", "versionEndExcluding": "1.13.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_16_5625:-:*:*:*:*:*:*:*", "matchCriteriaId": "C6D67E18-5D2F-4D1A-9570-A83F573C0B7E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_15_3535_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14DA511C-B06C-4CD4-B089-3067B64F8871", "versionEndExcluding": "1.12.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_15_3535:-:*:*:*:*:*:*:*", "matchCriteriaId": "E43E62FB-FD2D-4189-A692-23527D838690", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_15_3525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5EE6427E-D5B1-4414-9D20-2C1ED56DB637", "versionEndExcluding": "1.15.1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_15_3525:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C818D45-465A-4BCE-A6E6-B7C54485EB3A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_15_3515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B1E7746B-CCF6-4293-906B-6F91EF2A4069", "versionEndExcluding": "1.16.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_15_3515:-:*:*:*:*:*:*:*", "matchCriteriaId": "C72CC59F-C18E-4668-853F-8F2BA59A129A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_14_7435_2-in-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A7A5962-55C5-4EB0-926E-562FC2C20FB1", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_14_7435_2-in-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A037401-9C16-40A6-948E-AD310587E6A4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_14_7425_2-in-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5AD152E5-FAAC-4533-98E7-B6C14C3A9502", "versionEndExcluding": "1.13.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_14_7425_2-in-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AFF3169-604D-48F4-A04E-280056592521", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_14_5435_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCBD4767-B796-43A4-BE6C-BC25BB79BFEA", "versionEndExcluding": "1.8.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_14_5435:-:*:*:*:*:*:*:*", "matchCriteriaId": "71BEFBEB-548A-445E-98D3-28BBFC7CA412", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:inspiron_14_5425_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "890DF5F3-9D07-4D8E-83D4-FC513DA43244", "versionEndExcluding": "1.13.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:inspiron_14_5425:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2439A92-05B4-4654-A459-AC2E87745FFF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g5_5505_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "69D7E3C5-6158-4360-A8A2-248496D34292", "versionEndExcluding": "1.18.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g5_5505:-:*:*:*:*:*:*:*", "matchCriteriaId": "0566A03A-54DA-429D-B088-228559803249", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g15_5535_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A3A07529-B337-4100-B50A-B838260476C4", "versionEndExcluding": "1.5.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g15_5535:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CE33B5D-E5DF-443D-8CCA-09CFB259D20C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g15_5525_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CFDC8F0B-EFFC-40A7-9399-750BA719B82A", "versionEndExcluding": "1.15.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g15_5525:-:*:*:*:*:*:*:*", "matchCriteriaId": "68FD27D9-7C76-450C-8535-DE86FC006C46", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:g15_5515_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AA9EB379-2C98-402A-BB3C-FC7180196487", "versionEndExcluding": "1.15.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:g15_5515:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DD6D554-0CEC-411C-9D44-A0F3AE3D3A07", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m18_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BC8D3E27-68C4-4F38-8436-725B5294215F", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m18:-:*:*:*:*:*:*:*", "matchCriteriaId": "72F40FC8-755B-4353-AB4E-73F59FF4E982", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m17_r5_amd_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B40466F0-EE69-4BD6-AA08-A2A6B353AACC", "versionEndExcluding": "1.15.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m17_r5_amd:-:*:*:*:*:*:*:*", "matchCriteriaId": "7423FFC8-C206-46A3-B5EF-D8077C315514", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m16_r1_amd_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "340FA3F7-5D8A-4DEC-B115-8D81470C8450", "versionEndExcluding": "1.9.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m16_r1_amd:-:*:*:*:*:*:*:*", "matchCriteriaId": "B16CF02D-14B3-4C2A-BB00-D2FAEB563352", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m15_ryzen_edition_r5_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F09AF627-20AB-4A2A-BF19-399F1DD27F59", "versionEndExcluding": "1.16.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m15_ryzen_edition_r5:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDDF9040-D1A2-4F53-B2A1-60A56A401DDA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_m15_r7_amd_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6EFDB3FF-B12D-4E03-8846-3594C1DD6597", "versionEndExcluding": "1.15.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_m15_r7_amd:-:*:*:*:*:*:*:*", "matchCriteriaId": "DC05325D-7B5C-415E-A8C2-FE28AEC878D3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_aurora_ryzen_edition_r14_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E48A0D38-6DCE-4531-8D3F-25C594C9DE61", "versionEndExcluding": "2.16.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_aurora_ryzen_edition_r14:-:*:*:*:*:*:*:*", "matchCriteriaId": "66B64687-CF02-414E-B961-84A011DC49E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_aurora_r15_amd_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "34DF7BEA-2EF9-47A8-965D-C045C793F834", "versionEndExcluding": "1.13.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_aurora_r15_amd:-:*:*:*:*:*:*:*", "matchCriteriaId": "503027CC-7D9B-4F00-9728-48C12B18BD7B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:dell:alienware_aurora_r10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D22BE20-CEC2-45EC-B217-737F14B2A874", "versionEndExcluding": "2.6.0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:dell:alienware_aurora_r10:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1B5E1A2-3F3B-42AF-93ED-01ABF2763BC6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system." }, { "lang": "es", "value": "El BIOS de Dell contiene una falta de soporte para la vulnerabilidad de verificaci\u00f3n de integridad. Un atacante con acceso f\u00edsico al sistema podr\u00eda potencialmente eludir los mecanismos de seguridad para ejecutar c\u00f3digo arbitrario en el sistema." } ], "id": "CVE-2023-32475", "lastModified": "2024-11-21T08:03:25.883", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 0.9, "impactScore": 6.0, "source": "security_alert@emc.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 0.9, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-06-07T03:15:08.950", "references": [ { "source": "security_alert@emc.com", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability" } ], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-353" } ], "source": "security_alert@emc.com", "type": "Primary" } ] }