Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.
Search vulnerabilities
CVE-2022-26859
CVSS 3.1 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-26860
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-26861
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
CVSS 3.1 · 7.9 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-26858
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
CVSS 3.1 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.