Search/CVE-2022-26861
● CVE — High

CVE-2022-26861

VendordellProductchengming 3980 firmware, embedded box pc 5000 firmware, g3 3579 firmware, g7 7588 firmware, g3 15 3590 firmware, g5 15 5590 firmware, g5 5090 firmware, g7 17 7790 firmware, chengming 3988 firmware, chengming 3990 firmware, chengming 3991 firmware, alienware m15 r6 firmware, g15 5510 firmware, g15 5511 firmware, g3 3500 firmware, g5 5500 firmware, g7 7500 firmware, g5 5000 firmware, edge gateway 3000 firmware, edge gateway 5000 firmware, embedded box pc 3000 firmware, g5 15 5587 firmware, g7 17 7700 firmware, latitude 3480 firmware, latitude 3580 firmwareDiscoveredSep 6, 2022UpdatedNov 21, 2024

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.

CVSS v3.1
7.9 HIGH
EPSS
0.22%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Sep 6, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024