CVE-2022-26863CWE-20

Prior Dell BIOS versions contain an Input Validation vulnerability

Medium · published June 23, 2022

CVSS v3.1
6.3
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-06-23T17:55Z
EPSS history
Timeline
  • 23 JUN 17:55Z
    Prior Dell BIOS versions contain an Input Validation vulnerability
    cvelistv5