high7.5
CVE-2022-32490
Dell BIOS contains an improper input validation vulnerability.
Impact
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Edge Gateway 3000 Firmware | before 1.9.0 |
| Dell | Edge Gateway 5000 Firmware | before 1.19.0 |
| Dell | Embedded Box Pc 3000 Firmware | before 1.15.0 |