Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-26864

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.3, requiring local system access to exploit with relatively low complexity without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and limited availability for affected systems. Impacting 68 products from dell, from dell, from dell and 65 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2022, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2022-06-23T18:15:07.943

Last Modified

2024-11-21T06:54:42.180

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dell alienware_m15_r5_firmware < 1.5.0 Yes
Hardware dell alienware_m15_r5 - No
Operating System dell g15_5515_firmware < 1.6.0 Yes
Hardware dell g15_5515 - No
Operating System dell g5_se_5505_firmware < 1.11.0 Yes
Hardware dell g5_se_5505 - No
Operating System dell inspiron_27_7775_firmware < 2.16.1 Yes
Hardware dell inspiron_27_7775 - No
Operating System dell inspiron_14_5425_firmware < 1.2.1 Yes
Hardware dell inspiron_14_5425 - No
Operating System dell inspiron_3275_firmware < 1.9.0 Yes
Hardware dell inspiron_3275 - No
Operating System dell inspiron_3475_firmware < 1.9.0 Yes
Hardware dell inspiron_3475 - No
Operating System dell inspiron_3180_firmware < 1.4.4 Yes
Hardware dell inspiron_3180 - No
Operating System dell inspiron_3185_firmware < 1.4.4 Yes
Hardware dell inspiron_3185 - No
Operating System dell inspiron_3195_firmware < 1.4.1 Yes
Hardware dell inspiron_3195 - No
Operating System dell inspiron_3505_firmware < 1.6.0 Yes
Hardware dell inspiron_3505 - No
Operating System dell inspiron_3515_firmware < 1.5.0 Yes
Hardware dell inspiron_3515 - No
Operating System dell inspiron_3525_firmware < 1.3.0 Yes
Hardware dell inspiron_3525 - No
Operating System dell inspiron_3585_firmware < 1.7.0 Yes
Hardware dell inspiron_3585 - No
Operating System dell inspiron_3595_firmware < 1.3.0 Yes
Hardware dell inspiron_3595 - No
Operating System dell inspiron_3785_firmware < 1.7.0 Yes
Hardware dell inspiron_3785 - No
Operating System dell inspiron_5405_firmware < 1.7.0 Yes
Hardware dell inspiron_5405 - No
Operating System dell inspiron_5415_firmware < 1.9.0 Yes
Hardware dell inspiron_5415 - No
Operating System dell inspiron_5415_all-in-one_firmware < 1.5.0 Yes
Hardware dell inspiron_5415_all-in-one - No
Operating System dell inspiron_5485_firmware < 2.8.0 Yes
Hardware dell inspiron_5485 - No
Operating System dell inspiron_5505_firmware < 1.7.0 Yes
Hardware dell inspiron_5505 - No
Operating System dell inspiron_5515_firmware < 1.9.0 Yes
Hardware dell inspiron_5515 - No
Operating System dell inspiron_5575_firmware < 1.6.0 Yes
Hardware dell inspiron_5575 - No
Operating System dell inspiron_5585_firmware < 2.8.0 Yes
Hardware dell inspiron_5585 - No
Operating System dell inspiron_7375_firmware < 1.7.0 Yes
Hardware dell inspiron_7375 - No
Operating System dell inspiron_7405_firmware < 1.8.0 Yes
Hardware dell inspiron_7405 - No
Operating System dell inspiron_7415_firmware < 1.9.0 Yes
Hardware dell inspiron_7415 - No
Operating System dell inspiron_7425_firmware < 1.2.1 Yes
Hardware dell inspiron_7425 - No
Operating System dell vostro_3405_firmware < 1.6.0 Yes
Hardware dell vostro_3405 - No
Operating System dell vostro_3515_firmware < 1.5.0 Yes
Hardware dell vostro_3515 - No
Operating System dell vostro_3525_firmware < 1.3.0 Yes
Hardware dell vostro_3525 - No
Operating System dell vostro_5415_firmware < 1.9.0 Yes
Hardware dell vostro_5415 - No
Operating System dell vostro_5515_firmware < 1.9.0 Yes
Hardware dell vostro_5515 - No
Operating System dell vostro_5625_firmware < 1.2.1 Yes
Hardware dell vostro_5625 - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For dell's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.