medium6.1
CVE-2022-26858
Dell BIOS versions contain an Improper Authentication vulnerability.
Impact
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | before 1.8.0 |
| Dell | Chengming 3980 Firmware | before 2.21.0 |
| Dell | Chengming 3988 Firmware | before 1.9.0 |
| Dell | Chengming 3990 Firmware | before 1.8.2 |
| Dell | Chengming 3991 Firmware | before 1.8.2 |
| Dell | G15 5510 Firmware | before 1.8.0 |
| Dell | G15 5511 Firmware | before 1.9.0 |
| Dell | G3 15 3590 Firmware | before 1.16.0 |
| Dell | G3 3500 Firmware | before 1.12.0 |
| Dell | G3 3579 Firmware | before 1.19.0 |
| Dell | G5 15 5587 Firmware | before 1.19.0 |
| Dell | G5 15 5590 Firmware | before 1.18.0 |