medium6.8
CVE-2022-29083
Prior Dell BIOS versions contain an Improper Authentication vulnerability.
Impact
Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Chengming 3980 Firmware | before 2.23.0 |
| Dell | Chengming 3990 Firmware | before 1.11.0 |
| Dell | Chengming 3991 Firmware | before 1.11.0 |
| Dell | G3 3579 Firmware | before 1.21.0 |
| Dell | G3 3779 Firmware | before 1.21.0 |
| Dell | G5 5587 Firmware | before 1.21.0 |
| Dell | G5 5000 Firmware | before 1.7.0 |
| Dell | G5 5090 Firmware | before 1.14.0 |
| Dell | G7 7588 Firmware | before 1.21.0 |
| Dell | Inspiron 3470 Firmware | before 2.23.0 |
| Dell | Inspiron 3480 Firmware | before 1.19.0 |
| Dell | Inspiron 3493 Firmware | before 1.19.0 |