medium4.7
CVE-2022-22567
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability.
Impact
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware Area 51m R1 Firmware | before 1.16.0 |
| Dell | Alienware Area 51m R2 Firmware | before 1.11.0 |
| Dell | Alienware M15 R3 Firmware | before 1.12.0 |
| Dell | Alienware M15 R4 Firmware | before 1.6.2 |
| Dell | Alienware M15 R6 Firmware | before 1.6.0 after 1.6.0 before 1.8.0 |
| Dell | Alienware M17 R3 Firmware | before 1.12.0 |
| Dell | Alienware M17 R4 Firmware | before 1.6.2 |
| Dell | Chengming 3990 Firmware | before 1.6.0 |
| Dell | Chengming 3991 Firmware | before 1.6.0 |
| Dell | G15 5510 Firmware | before 1.8.0 |
| Dell | G15 5511 Firmware | before 1.9.0 |
| Dell | G3 3500 Firmware | before 1.12.0 |