CVE-2022-34383

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM.

View graph Watch Export

CVSS v3.1

8.1 HIGH

EPSS

0.45%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Aug 16, 2026 → Aug 29, 2026

▼ 0.02pp

0.47% → 0.45% over 2 tracked changes

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

ScopeCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityLOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

Connections

2 relationships

CWE-77

source

Timeline

disclosure → media coverage

Aug 31, 2022

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024