High severity · published Jun 23, 2022
CVE-2022-26864
Prior Dell BIOS versions contain an Input Validation vulnerability
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Alienware M15 R5 Firmware · Dell
before 1.5.0 · source: NVD
G5
G15 5515 Firmware · Dell
before 1.6.0 · source: NVD
GS
G5 SE 5505 Firmware · Dell
before 1.11.0 · source: NVD
I1
Inspiron 14 5425 Firmware · Dell
before 1.2.1 · source: NVD
I2
Inspiron 27 7775 Firmware · Dell
before 2.16.1 · source: NVD
I3
Inspiron 3180 Firmware · Dell
before 1.4.4 · source: NVD
I3
Inspiron 3185 Firmware · Dell
before 1.4.4 · source: NVD
I3
Inspiron 3195 Firmware · Dell
before 1.4.1 · source: NVD
I3
Inspiron 3275 Firmware · Dell
before 1.9.0 · source: NVD
I3
Inspiron 3475 Firmware · Dell
before 1.9.0 · source: NVD
I3
Inspiron 3505 Firmware · Dell
before 1.6.0 · source: NVD
I3
Inspiron 3515 Firmware · Dell
before 1.5.0 · source: NVD
Affected product
AM
Alienware M15 R5 Firmware
Dell
More from Alienware M15 R5 Firmware
7.8
CVE-2022-26863
Prior Dell BIOS versions contain an Input Validation vulnerability
7.8
CVE-2022-26862
Prior Dell BIOS versions contain an Input Validation vulnerability