medium6.3
CVE-2022-26863
Prior Dell BIOS versions contain an Input Validation vulnerability.
Impact
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R5 Firmware | before 1.5.0 |
| Dell | G15 5515 Firmware | before 1.6.0 |
| Dell | G5 Se 5505 Firmware | before 1.11.0 |
| Dell | Inspiron 27 7775 Firmware | before 2.16.1 |
| Dell | Inspiron 14 5425 Firmware | before 1.2.1 |
| Dell | Inspiron 3275 Firmware | before 1.9.0 |
| Dell | Inspiron 3475 Firmware | before 1.9.0 |
| Dell | Inspiron 3180 Firmware | before 1.4.4 |
| Dell | Inspiron 3185 Firmware | before 1.4.4 |
| Dell | Inspiron 3195 Firmware | before 1.4.1 |
| Dell | Inspiron 3505 Firmware | before 1.6.0 |
| Dell | Inspiron 3515 Firmware | before 1.5.0 |