high7.9
CVE-2022-26861
Dell BIOS versions contain an Insecure Automated Optimization vulnerability.
Impact
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | before 1.8.0 |
| Dell | Chengming 3980 Firmware | before 2.21.0 |
| Dell | Chengming 3988 Firmware | before 1.9.0 |
| Dell | Chengming 3990 Firmware | before 1.8.2 |
| Dell | Chengming 3991 Firmware | before 1.8.2 |
| Dell | G15 5510 Firmware | before 1.8.0 |
| Dell | G15 5511 Firmware | before 1.9.0 |
| Dell | G3 15 3590 Firmware | before 1.16.0 |
| Dell | G3 3500 Firmware | before 1.12.0 |
| Dell | G3 3579 Firmware | before 1.19.0 |
| Dell | G5 15 5587 Firmware | before 1.19.0 |
| Dell | G5 15 5590 Firmware | before 1.18.0 |